Subprocessors
Third-party services that help us deliver DuePilot
What is a Subprocessor?
A subprocessor is a third-party service provider that processes personal data on our behalf to help deliver DuePilot. We carefully select partners who meet our security and privacy standards.
Current Subprocessors
Cloud Infrastructure
Hosting and database services
Provider: Cloudflare / Vercel
Location: United States
Purpose: Application hosting and content delivery
Data: All application data
Email Delivery
Transactional email service
Provider: Resend / Postmark / SendGrid (configurable)
Location: United States
Purpose: Password resets, email verification, notifications
Data: Email addresses, names, message content
Payment Processing
Secure payment handling (optional)
Provider: Stripe / PayPal (user choice)
Location: United States
Purpose: Process subscription payments
Data: Payment information (not stored by DuePilot)
Analytics
Privacy-focused usage analytics
Provider: Plausible / PostHog (configurable)
Location: European Union
Purpose: Understand product usage (anonymized)
Data: Page views, events (no personal data)
Data Processing Agreements
All subprocessors have signed Data Processing Agreements (DPAs) or Standard Contractual Clauses (SCCs) to ensure GDPR compliance.
Changes to Subprocessors
If we add or change subprocessors, we'll:
- Update this page with the new provider
- Notify existing customers via email (for material changes)
- Provide 30 days notice before the change takes effect
You can object to a new subprocessor. If we cannot accommodate your objection, you may terminate your subscription.
Your Control
Some subprocessors are optional:
- Payment processors: Use manual billing instead of Stripe/PayPal
- Analytics: Opt out via account settings
Email delivery and cloud hosting are essential for the service and cannot be opted out.
Questions?
For questions about our subprocessors or data processing, contact privacy@duepilot.com.