Subprocessors
Last updated: 2026-11-08 · Version 2026-11-08
The providers we use to run Boost Type, what each receives, and where. See the Privacy Notice for how we use them.
Providers
| Function | Vendor | Data processed | Location | Transfer mechanism |
|---|---|---|---|---|
| Application hosting | [VENDOR: to be confirmed] (shortlist in our plan: Vercel or a container host) | All data in transit; request logs incl. IP address | [REGION: to be confirmed] | [DPF / SCC: to be confirmed] |
| Database (Postgres) | [VENDOR: to be confirmed] (shortlist: Neon, Supabase, or a cloud-provider managed Postgres) | Accounts, typing data, statistics, consent records, billing references | [REGION: to be confirmed] | [DPF / SCC: to be confirmed] |
| Payments, billing and tax calculation | Stripe (hosted checkout, customer portal, invoices and receipts, Stripe Tax) | Email, name, billing address, tax ID, payment details (handled by Stripe, not us), subscription and invoice records | United States, with Stripe entities in the EU and elsewhere | Stripe Services Agreement and Data Processing Agreement, EU-U.S. Data Privacy Framework and SCCs; Stripe is also an independent controller for fraud prevention and its legal obligations |
| Sign in with Google (optional) | Google (OpenID Connect) | Only if you choose it: your Google account's email, name and an account identifier; Google learns that you signed in to us | Per Google | Google is an independent controller for your Google account |
| Transactional and lifecycle email | [VENDOR: to be confirmed] (configured option in the code: Resend; alternatives Postmark, Amazon SES) | Email address, message content, delivery status | [REGION: to be confirmed] | [DPF / SCC: to be confirmed] |
| Error tracking | [VENDOR: to be confirmed] (shortlist: Sentry) | Error reports and technical context, configured to exclude typed text and key events | [REGION: to be confirmed] | [DPF / SCC: to be confirmed] |
| Product analytics (cookieless) | [VENDOR: to be confirmed] (shortlist: Plausible, Umami or PostHog in cookieless mode) | Page views and feature use; no keystroke data, no cookies, no raw IP stored | [REGION: to be confirmed] | [DPF / SCC: to be confirmed] |
| Backups and object storage | [VENDOR: to be confirmed] | Encrypted copies of database backups | [REGION: to be confirmed] | [DPF / SCC: to be confirmed] |
| Support tooling | None at present (support runs on email) | Support correspondence | n/a | n/a |
Changes
We update this page when we add or replace a provider. Questions or objections: [email protected].