Subprocessor List
Last updated: April 21, 2026
SwiftLeadz uses the following third-party service providers ("subprocessors") to deliver our platform. These companies may process personal data on our behalf. We maintain agreements with each subprocessor that require them to protect personal data in a manner consistent with applicable law and our Privacy Policy.
This list is updated when subprocessors are added or removed. Customers who have signed a Data Processing Addendum (DPA) with SwiftLeadz will be notified of material changes to this list.
Infrastructure & Hosting
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
| Supabase | Database, authentication, real-time | All customer and lead data | United States (AWS us-east-1) |
| Railway | API server hosting | All API request data | United States |
| Vercel | Admin portal hosting, CDN | Web traffic, session tokens | United States / Global CDN |
| Amazon Web Services | Underlying cloud infrastructure (via above) | Infrastructure only | United States |
Communications
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
| Twilio | SMS sending and receiving, phone number management | Phone numbers, SMS message content, call logs | United States |
| SendGrid (Twilio) | Transactional email delivery | Email addresses, email content | United States |
| Expo (Expo Inc.) | Push notification delivery (mobile app) | Device push tokens, notification content | United States |
Payments
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
| Stripe | Payment processing, subscription management | Payment card data, billing information | United States |
Analytics & Monitoring
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
| Google Analytics | Website usage analytics (anonymized) | IP addresses (anonymized), page views, usage patterns | United States |
| Sentry (optional) | Error monitoring and crash reporting | Error logs, stack traces, limited user context | United States |
Customer Support
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
| Intercom (optional) | In-app customer support chat | Name, email, account activity for support sessions | United States |
Subprocessor Change Notifications
SwiftLeadz will provide at least 10 days' advance notice before adding or materially changing a subprocessor. Customers who have signed a DPA may object to a new subprocessor by submitting a written objection within 10 days.
To subscribe to subprocessor change notifications, email legal@swiftleadz.com with the subject "Subprocessor Change Notifications."
International Transfers
Some of our subprocessors process data outside the European Economic Area (EEA). Where applicable, we rely on Standard Contractual Clauses (SCCs) or other approved transfer mechanisms to ensure adequate protection for personal data transferred internationally.
Contact
Questions about our subprocessors? Contact privacy@swiftleadz.com