Subprocessors
Effective Date: 08-10-2026
To run QuoteChecker we rely on a small set of external service providers ("subprocessors"). Each one is bound by written terms that limit its use of the data it handles to the service it performs for us. This page lists every subprocessor, what it does, and what data it receives, so the disclosure stays honest as the product changes. It is generated from the same code-owned list our software uses, so a provider can't quietly start touching your data without appearing here.
Providers that process your submitted content
When you run an audit, the text of your quote or bill — and content derived from it, such as extracted line items and the generated audit — is processed by the providers below. This is the complete list; no provider outside it receives your submitted content.
| Provider | Purpose | Data it receives | Region |
|---|---|---|---|
| Supabase (PostgreSQL) | Primary application database and object storage | Account data, audit history, subscriptions, and all stored account-linked records | United States |
| OpenAI | AI analysis of submitted quotes/bills; live web research | Submitted quote/bill text, derived audit context, and research queries | United States |
| Together.ai | Structured data extraction and independent AI scoring for Deep Analysis | Submitted quote/bill text and generated audit text | United States |
| OCR.space | Image/PDF text extraction (OCR) when you upload a file | The uploaded quote/bill image or PDF | United States |
| Vercel | Application hosting and serverless compute | All request traffic transits the platform | United States |
Providers that process account, billing, and operational data
These providers handle your account, payments, email, delivery, and platform security. They do not receive your submitted quote/bill content.
| Provider | Purpose | Data it receives | Region |
|---|---|---|---|
| Clerk | Authentication and account/session management | Email address, authentication tokens, and account identifiers | United States |
| Stripe | Payment processing, subscription billing, and creator payouts | Payment-method details, billing country, email, and subscription state | United States |
| Resend | Transactional and course/notification email delivery | Email address and message content (e.g. a contact-form body) | United States |
| Cloudflare | CDN, DNS, and edge security/DDoS protection | IP address and request metadata transit the edge | Global edge |
| Browser push services (Google, Mozilla, Apple) | Delivering a notification to your device when Pro background work finishes — only if you turn notifications on | The push address your own browser issues, and a payload encrypted end-to-end to your browser's key that the service cannot read. Off by default; turning notifications off deletes the record | Determined by your browser vendor |
| Plausible Analytics | Cookieless, privacy-preserving product analytics | Aggregate page views with no cookies and no personal identifiers | European Union |
Questions about this list? Email contact@quotechecker.ai.