Data Processing for Partners
How Pitfire handles data when you embed the widget on your own site.
Pitfire’s role
When you embed the Pitfire widget on your site, we act as data processor for whatever your own customers type into the widget. You remain the data controller toward your customers.
What we process / what we don’t keep
The widget processes the text your customers write (questions or cook-plan requests) to generate a response, and their IP address transiently to prevent abuse. We don’t permanently store the content of these conversations in our systems — they’re processed in real time.
Subprocessors
Anthropic
AI processing of your customers’ widget input
Open-Meteo
Weather data, only when a customer enters a location in Cook Planner
Upstash
Request rate-limiting to prevent abuse
Vercel
Application hosting
Security measures
All communication happens over HTTPS. We don’t permanently store widget conversation content. Access to our systems is limited to dedicated credentials with the minimum privileges needed.
Formal DPA
If your company needs a formal, signable Data Processing Agreement for your due diligence, write to privacy@pitfire.ai — we’ll provide one after legal review, tailored to your integration.
A note for partners
Since you’re the data controller toward your own customers, we recommend mentioning Pitfire as a subprocessor in your own privacy policy, noting that the widget processes your users’ typed text through AI (Anthropic).