Processors (GDPR Art. 28)
This page lists third parties that may process personal data on our behalf when you use our service. For questions email privacy@themarketplaceguys.com.
Show processor list
| Vendor | Purpose | Personal data types | Region | Notes |
|---|---|---|---|---|
| Supabase | Auth + DB + storage | Account identifiers; app data; consent/DSAR logs | EU (Frankfurt/Amsterdam) | |
| Hosting provider (Vercel) | Hosting + deployment + logs | Request metadata, IP, logs | Varies (configure) | |
| Stripe | Payments/billing | Customer + subscription + invoice metadata | Varies (configure) | |
| Google Analytics 4 | Analytics (after consent) | Usage events | Varies (configure) | Signals disabled in code; verify retention and data sharing in GA Admin. |
| Microsoft Clarity | Session analytics (after consent) | Interaction/session data | Varies (configure) | Excluded from sensitive routes (/settings, /billing, auth). Configure masking/retention in Clarity. |
| Supabase SMTP provider (e.g. Postmark) | Auth emails (signup/reset) | Email address; auth email content | Varies (configure) | |
| OpenAI | AI text/image processing | Prompts + generated content (avoid PII) | Varies (configure) | |
| Google GenAI/Gemini (optional) | AI image/text generation (optional) | Prompts + generated content (avoid PII) | Varies (configure) | |
| AWS (Comprehend) | NLP analysis (optional) | Text submitted for analysis | AWS region configured | |
| AWS (Rekognition) | Image analysis (optional) | Images submitted for analysis | AWS region configured | |
| AWS (Textract) | OCR/extraction (optional) | Documents/images (if enabled) | AWS region configured |