Draft. This page may change before it is final. Version 2026-10-draft1.
Subprocessors
These companies process personal data for Carnival, to run the service. Each gets only what its job needs.
| Company | What it does for Carnival | What it receives |
|---|---|---|
| Cloudflare, Inc. | Runs Carnival and serves the sites; stores accounts, sites and records; routes and sends email; runs the check that you're a person (Turnstile) on sign-in and our forms; runs the AI models that check deploys (Workers AI) | Everything Carnival holds |
| Google LLC | Checks the links in sites, and each site's own address, against Google's lists of unsafe web addresses (Web Risk) | Web addresses only |
| PagerDuty, Inc. | Alerts our on-call team by phone call, text message and app notification | An alert's name, which can include an internal site, account or report ID; never names, email addresses, IP addresses or site content |
| Our team's email provider (to be confirmed) | Holds the mailbox that mail to our carnival.dev addresses, reports and alerts are forwarded to | What you send to our addresses, reports and counter-notices, and alert emails |
Cloudflare processes data in the US and across its global network. Cloudflare doesn't train its AI models on what Carnival sends them.
Not subprocessors
- Meta (Muse) and the other apps you connect. When you connect an agent, its app gets what Carnival sends back to that agent, under the app's own terms. Its operator decides how it uses that data (an independent controller), so it is not our subprocessor.
- GitHub. It builds and tests our code, and receives no user data.
We update this page when the list changes. More about what we collect and keep: the Privacy Policy.