Subprocessors
Who helps us run ExactPour
Only services we found in this repository. OpenAI is not on the list because no Edge Function calls it. POS providers appear only as data sources you choose to connect.
Infrastructure
| Provider | Purpose | Data | Region |
|---|---|---|---|
| Supabase | Postgres database, Auth, Storage, and Edge Functions | Account profiles, inventory and operational data, auth tokens, uploaded invoices | United States (hosted on AWS) |
| Netlify | Hosting and CDN for exactpour.com | Visitor IP addresses, request logs, and pages requested | United States |
| Stripe | Checkout, subscriptions, and the customer billing portal | Billing email, Stripe customer and subscription IDs. Card numbers stay at Stripe. | United States / global |
Email and messaging
| Provider | Purpose | Data | Region |
|---|---|---|---|
| Resend | Transactional email (password reset, invites, report delivery) | Recipient email address and message content | United States |
| Loops | Lifecycle email events from Edge Functions | Account email, plan, and product events (POS connected, first count) | United States |
| FormSubmit | Lead and support form delivery | Name, email, venue, and message body | United States |
AI features
| Provider | Purpose | Data | Region |
|---|---|---|---|
| Anthropic | Invoice extraction, insights, and assistant replies | Prompts and files the customer submits to an AI feature | United States |
| Mistral AI | Optional invoice OCR layout prepass used with Anthropic | Uploaded invoice PDFs or images and derived OCR text | EU / United States |
POS data sources (customer-connected)
| Provider | Purpose | Data | Region |
|---|---|---|---|
| ToastCustomer-connected | POS menu, sales, and location sync when the customer connects Toast | Menus, sales tickets, and location identifiers | United States |
| SquareCustomer-connected | POS menu, sales, and location sync when the customer connects Square | Menus, sales tickets, and location identifiers | United States |
| CloverCustomer-connected | POS menu, sales, and location sync when the customer connects Clover | Menus, sales tickets, and location identifiers | United States |
| GoTabCustomer-connected | POS menu, sales, and location sync when the customer connects GoTab | Menus, sales tickets, and location identifiers | United States |
Optional operations tooling
| Provider | Purpose | Data | Region |
|---|---|---|---|
| Go-UPC | Barcode and UPC product lookup | Scanned barcodes and product lookup queries | United States |
| Google Analytics | Marketing-site analytics when a measurement ID is configured | Device and usage data, IP address (anonymized where configured) | United States / global |
| Meta | Marketing-site ads measurement when a pixel ID is configured and consented | Page events and limited conversion data | United States |
| Calendly | Demo scheduling | Name, email, and booked time | United States |
| Sentry | Crash reporting on the Expo client | Crash diagnostics and device data | United States |
| PostHog | Product analytics on the Expo client | Product usage events | United States / EU |
Talk with ExactPour
Need this list in a signed DPA?
Download the template on /dpa, then email legal@exactpour.com. Security reports go to security@exactpour.com.