Subprocessors
We use the following third-party services to operate the product. Each processes data only for the purpose listed.
| Service | Purpose | Location |
|---|---|---|
| Convex | Application database and backend functions | USA |
| Vercel | Web hosting and content delivery | USA / global CDN |
| Better Auth (self-hosted) | Authentication (runs on Convex) | — |
| Resend | Transactional and product email | USA / EU sending |
| Paddle | Payments, tax, and invoicing (merchant of record) | UK / EU |
| PostHog (EU Cloud) | Product analytics, session replay (consent-gated), error tracking | EU (Frankfurt) |
| Cloudflare Turnstile | Bot protection on auth forms | USA / global |
| Vercel AI Gateway | LLM API routing (only when AI features are enabled) | USA |
TODO before launch: remove services your prototype does not use and add any it does.