Sub-processors
Last updated: 14 June 2026
We rely on these third-party processors to run StandbyCue. Each handles personal data only on our instructions, under a Data Processing Agreement.
Supabase
Database, authentication, file storage
Data: Email, hashed password, profile, app content
Region: EU (verify project region)
Vercel
App hosting, serverless functions, logs
Data: Request/log data passing through the app
Region: Global edge
Resend
Transactional email
Data: Recipient email, email content
Region: Ireland (eu-west-1)
Cloudflare
Email routing, DNS/CDN
Data: Inbound email forwarded to admin
Region: Global
Lemon Squeezy
Payments & invoicing (Merchant of Record), VAT/tax
Data: Name, email, billing address, card data (held by LS), purchase history
Region: US / global, SCCs
Lemon Squeezy is our Merchant of Record: they are the seller of record, collect/remit VAT, and store card and billing data. Card data never reaches StandbyCue servers.