Sub-processors
Every company that touches your data on our behalf, what they get, and where they are.
Effective 23 August 2026Last updated 23 August 2026
| Company | What it does for us | What it receives | Where |
|---|---|---|---|
| Supabase | Database, authentication and file storage | Everything you put into Runsheet | United States |
| Vercel | Application hosting and delivery | Requests and server logs, including IP addresses | United States and global edge |
| Resend | Sending invitations, notifications, digests and sign-in links | Recipient email addresses and message content | United States |
| Dodo Payments | Merchant of Record: payment processing, tax, invoicing, refunds | Your billing name, email, country, and payment details, which go to them directly and never through us | United States, European Union and India |
| Sentry | Error reporting | Technical details of a failure and the account it happened to | United States |
| PostHog | Product analytics — only if you consent | Pseudonymous usage events | United States |
Changes. We will update this page before adding a sub-processor. If you have a data processing agreement with us and want notice of changes, say so at privacy@runsheetforyou.com and we will email you 30 days ahead.