Subprocessors
Last updated: June 9, 2026
A subprocessor is a third-party service provider that processes information on our behalf to help us operate the Good Writing App. We rely on a small number of subprocessors so we can run the Service without building everything ourselves — for example, to host the application, process payments, deliver email, and perform language analysis on the text you submit.
This page lists the named subprocessors we currently use. For background on what information each category of subprocessor receives and how we protect it, see our Privacy Policy.
We may add or change subprocessors from time to time. We will provide registered users at least 30 days' advance notice by email before adding a new subprocessor that processes personal information. Routine non-material changes will be reflected on this page. We recommend checking this page periodically for updates.
Current subprocessors
| Provider | Service | Data processed | Location | Privacy / Terms | DPA / no-training / transfer posture |
|---|---|---|---|---|---|
| Vercel | Hosting and content delivery | IP address, device and request metadata, application traffic, and routing/security logs | United States | vercel.com/legal/privacy-policy | Standard service-provider terms and data-processing terms apply. |
| Supabase | Database, authentication, and authentication-email delivery | Account data, authentication data, saved documents, verification artifacts, and application records | United States region | supabase.com/privacy | Standard service-provider terms and data-processing terms apply. |
| Stripe | Payment processing | Email address, customer and subscription identifiers, billing metadata, and payment details | United States | stripe.com/privacy | Payment data is collected and processed directly by Stripe under its payment-processing terms. |
| Anthropic | Language analysis | Document Content submitted for analysis and limited technical metadata needed to return a response | United States | anthropic.com/legal/commercial-terms | Prohibited from using Document Content to train models under the relevant API/commercial terms. |
| PostHog | Product analytics | Product usage events, device/browser metadata, account identifiers, and analytics cookies | United States | posthog.com/privacy | Standard service-provider terms and data-processing terms apply; Document Content is not sent. |
| Loops.so | Marketing email, lifecycle email, and select transactional notifications | Email address, plan information, signup and product-activity signals, and payment-event signals | United States | loops.so/privacy | Standard service-provider terms and data-processing terms apply. |
| Tally | Bug-report form embed | Information you choose to submit through the bug-report form | European Union (Belgium) | tally.so/help/privacy-policy | Standard service-provider terms and data-processing terms apply. |
| Google (Google Fonts) | Server-side font delivery for our social-share preview images | Request metadata needed to retrieve fonts for server-generated social-share preview images | United States | policies.google.com/privacy | Standard service-provider terms apply. |
| Meta Platforms, Inc. | Advertising conversion measurement (Conversions API) | Conversion event type and value, advertising click identifier (`fbclid`/`fbc`), and — if enabled — a one-way hashed email; optionally IP address and user-agent | United States | facebook.com/privacy/policy | Server-to-server measurement only; configured under Limited Data Use (LDU). No browser pixel or advertising cookies. Document Content is not sent. |
| Google LLC (Google Ads) | Advertising conversion measurement (conversion import / Enhanced Conversions) | Conversion event type and value, advertising click identifier (`gclid`), and — if enabled — a one-way hashed email | United States | policies.google.com/privacy | Server-side conversion import only; configured under Restricted Data Processing (RDP). No browser ads/remarketing tag or advertising cookies. Document Content is not sent. |
Each subprocessor receives only the information needed for its specific function and is required to handle that information with at least the same level of protection described in our Privacy Policy.
Questions
If you have questions about our use of subprocessors, email support@goodwriting.app.