1. About service providers and sub-processors
Sub-processors are third-party service providers used by Datopia to provide, secure, host, bill, support, or improve Datopia Flow. This list identifies providers found in the Flow project and the purposes for which they are used.
This list includes providers that may act as sub-processors for customer-controlled Flow data and providers that Datopia uses for its own controller-side business, billing, analytics, security, or administration purposes. Not every provider listed processes customer-controlled Flow data as a sub-processor.
Datopia does not sell personal data.
2. Current providers
| Provider | Role | Purpose | Data categories | Location or transfer note |
|---|---|---|---|---|
| Supabase | Sub-processor / platform provider | Database, authentication, storage, realtime, and related backend services. | Account data, business account data, customer-controlled Flow data, uploads, logs, authentication and security data. | Provider may process data outside the UK. Appropriate safeguards are used where required. |
| Vercel | Sub-processor / hosting provider | Hosting, deployment, edge/serverless infrastructure, and application delivery. | Website/app traffic data, technical logs, application requests, and limited hosted application data where processed through the infrastructure. | Provider may process data outside the UK. Appropriate safeguards are used where required. |
| Stripe | Payment and billing provider for Datopia controller-side billing activity; not normally a sub-processor for customer-controlled Flow data | Checkout, subscription billing, invoices, payment status, and payment processing. | Billing contact details, Stripe customer/subscription IDs, invoice records, payment status, payment metadata. Card details are handled by Stripe and are not stored by Datopia Flow. | Provider may process data outside the UK. Appropriate safeguards are used where required. |
| Resend | Sub-processor where used for Flow communications containing customer-controlled data; otherwise service provider for Datopia communications | Email delivery for invitations, Flow communications, billing notifications, partner sharing emails, reports, and support-related messages where used. | Recipient email addresses, message content, delivery metadata, and related communication records. | Provider may process data outside the UK. Appropriate safeguards are used where required. |
| Google Analytics | Analytics provider for Datopia controller-side usage/analytics data where used; not normally a sub-processor for customer-controlled Flow data | Website/app analytics and performance insight where used. | Cookie identifiers, device/browser information, IP-derived approximate location, pages/events viewed, and usage data. | Provider may process data outside the UK. Appropriate safeguards are used where required. |
3. Additional providers
Additional providers may be added where needed to provide hosting, security, support, analytics, email delivery, error logging, or related platform services. Datopia will update this list where appropriate and provide reasonable notice of material changes where practical.