Sub-processor list, the providers we use
Part of the Data Processing Terms. The complete list of our providers.
Last updated 3 October 2026
1. The list
As of 3 October 2026, these are all the providers that process personal information for Gaplessly. We send each only what its job needs, and each handles it under its own terms with us.
| Provider | What they do for us | Where they process it |
|---|---|---|
| Supabase | Database, authentication and file storage | Sydney, Australia (ap-southeast-2) |
| Vercel | Application hosting and content delivery | Sydney, Australia (syd1) |
| Hostinger | Background worker that sends notifications, and the self-hosted analytics tool described below | Kuala Lumpur, Malaysia |
| Sentry | Crash and error reporting for the app and the background worker | United States |
| Stripe | Subscription billing and, where enabled, deposit collection | United States, Australia |
| Resend | Transactional email delivery, and our own product updates to subscribers and account owners | United States |
| ClickSend | SMS delivery | Australia |
| Address autocomplete on business setup forms (Places API), and Google Analytics on this marketing site only, described in section 4 | United States | |
| PostHog | Our own product analytics and session recordings on this site and the dashboard, described in section 4 | United States |
| OpenRouter | Routes the in-app AI assistant’s requests to whichever language model is currently answering, from a small rotating set of providers | United States for routing; the underlying model may run in the United States or China |
| GitHub | Runs our nightly database backup, which is encrypted on GitHub’s server before it is stored, and keeps each encrypted backup for 90 days | United States |
| ImprovMX | Forwards email sent to our own contact addresses, such as privacy@ and support@ | United States, European Union |
2. Providers a business connects itself
A business can connect its own Meta Pixel, Google Ads tag, Google Analytics or Microsoft Clarity project to its booking page and website. Those are that business’s own accounts with those companies, not our providers, and the Cookie Policy explains them.
3. Changes
At least 30 days before we add a provider that will handle your customers’ information (or as soon as we can, if an urgent replacement is needed to keep the service running), we update this page and its date and email account owners. Section 5 of the Data Processing Terms explains how to object.
Also worth reading
- Terms of Service, the business agreement
- Billing Schedule, what you pay us
- Payments Terms, money your customers pay you
- Data Processing Terms, your customers’ data
- Acceptable Use Policy, how not to use Gaplessly
- AI Terms, the assistant and AI features
- Staff Notice, for people invited by a business
- Privacy Policy, how we handle your data
- Cookie Policy, and when we ask first
- Refund Policy, what it covers
- Data Deletion, Meta data requests
- AI Assistant Connector, what it can and cannot see