Privacy
Providers and subprocessors
This page lists the providers FinanceOS may use to operate the app. Contact hello@financeos.com.au for privacy questions.
| Provider | Purpose | Data categories | Region |
|---|---|---|---|
| Vercel | Hosting, deployment, analytics, and performance telemetry | Request metadata, page events, device and performance data | Global infrastructure |
| Supabase | Authentication, database, cloud sync, account data | Account identifiers, session metadata, synced workspace rows | Configured project region |
| Stripe | Payments, checkout, billing portal, subscription state | Billing identifiers, payment metadata, subscription status | Stripe global infrastructure |
| Anthropic | AI assistant responses | Chat messages and limited app snapshot context sent for AI replies | Provider-operated regions |
| Upstash Redis | Rate limiting for API routes when configured | Hashed or keyed request identifiers and rate-limit counters | Configured database region |
| PostHog | Controlled product and web analytics when configured | Whitelisted event names, page paths without query strings, coarse event properties, and anonymous analytics identifiers | Configured data region, currently EU Cloud for launch analytics |
| Resend or configured email provider | Transactional email such as authentication messages | Email address and delivery metadata | Provider-operated regions |
Provider usage depends on which features are enabled. For example, AI provider processing only applies when the assistant is used, and Stripe processing applies when checkout or billing features are used.
See also Privacy Policy and Methodology.