Subprocessors
Companies that process personal data to help us run Cancelbox. We will update this list when it changes.
Cancelbox, Inc. · Questions: legal@cancelbox.co
Current as of September 3, 2026. New material subprocessors are posted here with advance notice as described in the DPA.
| Name | Purpose | Location | Data |
|---|---|---|---|
| Supabase | Authentication, PostgreSQL, and file storage | United States / region you select | Account, workspace, and customer-session records |
| Stripe, Inc. | Connect OAuth, Billing APIs, webhooks, and Cancelbox subscription Checkout | United States and Stripe’s global regions | Connected-account tokens, subscription and invoice events. No card numbers stored by Cancelbox |
| Resend | Transactional email | United States | Workspace member email addresses and message content |
| PostHog | Product analytics for the Cancelbox application | United States or EU, depending on project | Pseudonymous product events from dashboard users who accept analytics cookies |
| Sentry | Error monitoring | United States | Application diagnostics; we strip secrets and tokens before send where possible |
| Vercel | Application hosting and edge delivery | United States and global edge | Request logs and the application itself |
Questions: privacy@cancelbox.co.