We don't do it all alone, but we're picky about who we work with.

We rely on a handful of vendors for hosting, payments, and security. Each is contractually bound to our standards, and gets only what it needs to do its job.

Here's who they are and what they do.

Subprocessors

Last updated September 1, 2026

Introduction

This page lists the third-party service providers (“Subprocessors”) that ANON AI Labs, Inc. (“Serus,” “ANON,” “we,” “us,” or “our”) uses to help deliver and support the Serus Services.

This list is provided for transparency and forms part of our Privacy program. Where applicable (for business/enterprise customers), Subprocessors are also covered under our Data Processing Addendum (DPA).

1. What is a “Subprocessor”?

A Subprocessor is a third party that processes personal data on our behalf in order to provide the Services (for example, cloud hosting, analytics, customer support tooling, authentication, or payment processing).

Some providers may act as independent controllers for data they process for their own purposes (for example, certain payment providers). In those cases, their processing is governed by their own privacy policies.

2. What this list includes (and what it may not include)

This list includes Subprocessors that may process personal data in connection with the Services.

Because we may update infrastructure, vendors, and integrations over time, the list may change. In limited cases, certain cookies, embedded content, or third-party integrations enabled by customers (e.g., within a white-label deployment) may involve additional third parties not listed here. For cookie-related technologies, see our Cookie Policy.

3. Updates and notifications

We may update this Subprocessors list from time to time. If we make material changes, we will update the “Last updated” date above and may provide additional notice where required by law or contract.

Enterprise customers who have notification rights under a signed agreement or DPA should follow the notice process in that agreement.

4. Subprocessors list

Below is a list of Subprocessors that may be used to provide the Services:

Clerk

Purpose: Authentication and user management

Location: United States

Data Types: Customer data (login credentials, authentication tokens, user profiles)

Amazon Web Services (AWS)

Purpose: Cloud infrastructure and hosting services

Location: United States

Data Types: Customer data, application data, logs

Fly.io

Purpose: Server hosting and global edge deployment

Location: United States / Global

Data Types: Customer data, application data, logs

Google

Purpose: Analytics, advertising measurement, and cloud services

Location: United States

Data Types: Customer data, analytics data, application data, logs

Resend

Purpose: Functional & transactional email delivery service

Location: United States

Data Types: Customer contact data (email addresses), communication content, delivery logs

Stripe

Purpose: Payment processing and billing services

Location: United States / Ireland

Data Types: Customer payment details, billing information, transaction data

Sentry

Purpose: Application monitoring, error tracking, and debugging

Location: United States

Data Types: Application data, error logs (may include limited customer-identifiable data if present in logs)

Trigger.dev

Purpose: Workflow automation and background job orchestration

Location: United Kingdom

Data Types: Customer data processed through automated tasks, application data, job execution logs

Zendesk

Purpose: Customer support and ticketing platform

Location: United States

Data Types: Customer contact details, support communications, metadata, and logs

PostHog

Purpose: Product analytics and user identification

Location: United States

Data Types: Email addresses, names, country

WhatsApp

Purpose: Delivery of notifications and alerts, and (where enabled) conversational AI messaging, via the WhatsApp Business Platform

Location: United States / Ireland (EU)

Data Types: Phone number, message content (including alerts and information you exchange with Serus), delivery metadata

Telegram (Telegram FZ-LLC)

Purpose: Delivery of notifications and (where enabled) conversational AI messaging via a Telegram bot

Location: United Arab Emirates / Global

Data Types: Telegram user ID and username, message content, delivery metadata

Discord (Discord, Inc.)

Purpose: Delivery of notifications and (where enabled) conversational AI messaging via a Discord bot

Location: United States

Data Types: Discord user ID and username, server/channel identifiers, message content, delivery metadata

Slack (Slack Technologies, LLC, a Salesforce company)

Purpose: Delivery of notifications and (where enabled) conversational AI messaging via a Slack app/bot

Location: United States

Data Types: Slack user ID, workspace/channel identifiers, message content, delivery metadata

Prighter (iuro Rechtsanwälte GmbH)

Purpose: EU/UK/Swiss GDPR Article 27 representation and data subject request management

Location: Austria (EU) / United Kingdom / Switzerland

Data Types: Data subject contact details, identification data, and request content

OpenRouter (routes to Google Gemini)

Purpose: AI processing and content analysis

Location: United States

Data Types: User profile data included in AI prompts

IPInfo

Purpose: IP geolocation

Location: United States

Data Types: IP addresses

LeakCheck

Purpose: Breach database lookups

Location: United Kingdom

Data Types: Email addresses, usernames, phone numbers, passwords, domains

Have I Been Pwned (Apozy Ltd / Troy Hunt)

Purpose: Breach data lookup

Location: United States / Australia

Data Types: Email addresses

OSINT Industries

Purpose: OSINT queries and intelligence gathering

Location: United Kingdom

Data Types: Email addresses, names, phone numbers, usernames, wallet addresses

Apple Inc.

Purpose: iOS app distribution via the Apple App Store, push notification delivery (APNs), and in-app purchase billing (Apple acts as an independent controller for App Store transactions)

Location: United States

Data Types: Device and push notification tokens, app diagnostics, purchase and transaction data

Google Play (Google LLC)

Purpose: Android app distribution via Google Play, push notification delivery (Firebase Cloud Messaging), and in-app billing (Google acts as an independent controller for Google Play transactions)

Location: United States

Data Types: Device and push notification tokens, app diagnostics, purchase and transaction data

Revenue Cat

Purpose: Mobile subscription management and purchase validation

Location: United States

Data Types: App user identifiers, purchase receipts, subscription status

Cloudflare

Purpose: Content delivery network, DNS, and security services for our websites and applications

Location: United States / Global

Data Types: IP addresses, request metadata, security logs

Pusher (Pusher Ltd / Message Bird)

Purpose: Real-time event and notification delivery within the Services

Location: United Kingdom / United States

Data Types: Connection identifiers, event and notification content, delivery metadata

5. Questions

If you have questions about this list or our vendors, contact:

Support: [email protected]

Privacy/DPO: [email protected]

Support portal: https://www.serus.ai/contact/support

Serus™ by Anon AI Labs Inc.
95 3rd St, 2nd floor, PMB 17574963, San Francisco, CA 94103, USA

Cookie preferences

Choose which categories we may use. Full details for every cookie are in our Cookie Policy.

Strictly necessary

Authentication, session management, security and fraud prevention, and saving your consent choice. Always active. The site cannot function without them.

Functional

Remember preferences such as language and settings that improve your experience.

Analytics

Help us understand how the site is used, like pages visited, interactions, and performance, so we can improve it.

Marketing & advertising

Measure our marketing and deliver more relevant ads through partners such as Google, Meta, TikTok, X, and Reddit. Used only with your consent.

Your choice is saved for 12 months and applies across serus.ai, including the app. You can change it anytime from the cookie widget or the "Cookie settings" link in the footer. Withdrawing consent does not affect processing that happened before withdrawal.