Sub-processors
Last updated: 29 September 2026
These are the third-party providers that may process personal data for Plutonapps and for our customers' products we run. We update this list before adding or replacing a provider.
Current sub-processors
| Provider | What they do | Where |
|---|---|---|
| Clerk, Inc. | Sign-in and account identity: name, email address, Google profile (if you use Google sign-in), profile picture, session records | United States |
| Supabase, Inc. | Database and file storage for accounts, requests, messages, attachments, intake answers, bookings, inquiries and billing status | United States (AWS us-east-1, North Virginia) |
| Stripe, Inc. / Stripe Payments Europe, Ltd. | Payments, subscriptions, invoices and the billing portal. Card details are entered on Stripe and never reach our servers | United States and Ireland |
| Resend (Plus Five Five, Inc.) | Sending transactional email: sign-in-adjacent notices, chat and inquiry notifications, staff invitations | United States |
| DigitalOcean, LLC | Hosting the website and application servers, including server logs | United States (NYC1) |
| Cloudflare, Inc. | DNS, network security and content delivery in front of the site | Global network |
| GitHub, Inc. | Source code hosting and build pipelines. No customer personal data is stored there by design | United States |
Stripe also acts as an independent controller for payment processing. Google Search Console and PageSpeed Insights are used only to measure the website's own performance and search visibility; they receive no visitor or customer personal data from us.
Where your product runs on infrastructure you own, those providers are yours, not ours, and are not listed here.
Updates
To be told about changes, email [email protected] and ask to be added to the list.