Subprocessors
Last updated: May 8, 2026
Upclytics relies on a small number of trusted service providers ("subprocessors") who process personal data on our behalf to operate the service. We have a written data-processing agreement with each. We will notify registered users of material changes to this list at least 30 days before the change takes effect.
Supabase Inc.
supabase.com/privacy ↗- Role
- Database hosting and authentication.
- Personal data shared
- Account email, hashed password, display name, contact_submissions records, session tokens.
- Hosting region
- United States (AWS us-east-2, Ohio).
- Transfer mechanism
- Standard Contractual Clauses (SCCs).
Vercel Inc.
vercel.com/legal/privacy-policy ↗- Role
- Hosting, CDN, and serverless function execution.
- Personal data shared
- Request metadata (IP, User-Agent, URL, response code) processed in transit through edge nodes; also receives a copy of any data passed through to our application during a request.
- Hosting region
- United States, with global edge presence (EU edge nodes used for EU visitors).
- Transfer mechanism
- Standard Contractual Clauses (SCCs); Vercel is also certified under the EU–US Data Privacy Framework.
Resend (Drisly Inc.)
resend.com/legal/privacy-policy ↗- Role
- Transactional email delivery (account, password reset, contact-form notifications).
- Personal data shared
- Recipient email address, recipient name (when included in the message), email content (subject and body), delivery and bounce metadata.
- Hosting region
- United States.
- Transfer mechanism
- Standard Contractual Clauses (SCCs).
European Patent Office (EPO Open Patent Services)
epo.org/legal/data-protection ↗- Role
- Patent metadata enrichment (we query EPO OPS to enrich patent records by application number).
- Personal data shared
- Patent application or publication numbers (no personal data is sent — only the public patent identifiers we already store).
- Hosting region
- European Union (Munich, Germany).
- Transfer mechanism
- Intra-EEA processing — no transfer mechanism required.
We do not currently use any analytics, advertising, or third-party tracking subprocessors. If we add any, this page will be updated and registered users will be notified before the change takes effect.