PeopleDat legal
Subprocessors
Current as of August 29, 2026
The service providers PeopleDat uses to deliver the functions described in the Privacy Policy.
Scope. This list covers providers that may process Customer Data or account data for PeopleDat. A customer's own webhook receiver, MCP client, email platform, or other independently chosen integration is not a PeopleDat subprocessor.
| Provider | Category | Purpose | Information involved |
|---|---|---|---|
| Railway | Hosting | Application hosting and deployment infrastructure | Account, request, diagnostic, and service-operation data |
| Neon | Storage | Managed PostgreSQL database | Account, organization, workspace, workflow, result, audit, and financial records |
| Upstash | Operations | Managed queue, cache, coordination, and rate-limit infrastructure | Short-lived job identifiers, counters, locks, and operational state |
| S3-compatible object-storage provider | Storage | Private object storage | Encrypted generated export objects |
| Reoon | Verification | Email verification provider | Addresses submitted when a sufficiently fresh protected cache result is unavailable, plus verification request data |
| Stripe | Billing | Checkout, subscriptions, PayGo purchases, invoices, tax features, and billing portal | Customer, transaction, subscription, invoice, and limited payment-method metadata |
| Resend | Communications | Transactional email delivery | Recipient address and aggregate sign-in, invitation, notification, contact, or support message content |
| Cloudflare | Security and delivery | Turnstile, DNS, proxy, and origin-protection services | Challenge, network, browser, device, and request-security information |
| Google Analytics | Optional analytics | Website analytics only after consent | Page, route, session, browser, device, approximate location, and privacy-limited aggregate funnel events |
| Google and GitHub | Optional sign-in | Third-party identity providers selected by the user | Identity and sign-in data returned by the selected provider |
Providers may process data in the United States or other regions and maintain their own security, backup, and deletion cycles. PeopleDat evaluates the role of a provider, limits the information sent to the function being performed, and updates this list when a change materially affects the processing described here.
If an executed data-processing addendum requires advance notice or an objection process, that addendum controls. Questions about a provider or a covered transfer can be sent to [email protected].