Subprocessors
These are the companies that process data on our behalf. Each one does a specific job, and the table says which data reaches it. If your legal review needs anything that is not here, email info@usefeedbackflow.com and we will answer rather than send you a form.
Supabase
Their DPADatabase, authentication, and file storage.
- Data processed
- Everything: feedback text, requester names and email addresses, account details, and uploaded attachments.
- Location
- EU (Frankfurt) or US, depending on the project region.
Vercel
Their DPAApplication hosting and edge network.
- Data processed
- Request metadata and anything in transit through the application. Vercel does not store feedback at rest.
- Location
- Global edge network; functions run in the configured region.
Anthropic
Their DPAAI triage: classification, deduplication, prioritization, and answering questions about feedback.
- Data processed
- Feedback message text, and topic names. Requester names and email addresses are never sent; PII detected in message text is redacted first.
- Location
- US
Stripe
Their DPAPayment processing and subscription billing.
- Data processed
- The account owner’s billing email, and payment details handled entirely by Stripe. No feedback data is sent to Stripe.
- Location
- US and EU
Resend
Their DPATransactional and product-update email.
- Data processed
- Recipient email addresses and message content. Product updates to end requesters carry the update text and nothing else about them.
- Location
- US
AI and model training
Your feedback data is never used to train AI models. We use Anthropic’s API under their commercial terms, which state that inputs and outputs submitted through the API are not used to train their models. We do not train models of our own on customer data, and we do not sell or share feedback data with anyone outside the subprocessors listed above.
Changes to this list
We give 30days’ notice before a new subprocessor starts processing customer data. That is long enough for you to object, and to terminate if you need to, which is the only reason the notice period is worth anything.
To be notified, email info@usefeedbackflow.com with “subprocessor notifications” in the subject. We add you to a list used for nothing else.