Subprocessors
Effective October 8, 2026.
Who helps us run the service
JoB Orange Marketing uses the service providers below to operate TrafficDefenseIQ. Each one only receives what it needs for its job. This list is part of our Data Processing Addendum, and the Privacy Policy explains how we handle information more broadly.
Supabase
Handles your uploaded lead data- What it does
- Database, authentication and file storage.
- What it can see
- Everything in your account: login details, uploaded lead data, scores, lists, settings and the original uploaded files. Stored data is encrypted at rest by the provider.
- Where
- Canada (Central), in the Montréal region
Vercel
Handles your uploaded lead data- What it does
- Application hosting and content delivery.
- What it can see
- Requests to the application pass through and are processed on Vercel's servers, including uploaded data while a file is being scored. Request logs include IP addresses.
- Where
- United States (application functions); static content is served from a global network.
Stripe
Never sees your uploaded lead data- What it does
- Payment processing and subscription billing.
- What it can see
- Account email, plan and billing details. Card numbers go straight to Stripe and never reach us.
- Where
- United States and other regions where Stripe operates.
Resend
Never sees your uploaded lead data- What it does
- Delivery of transactional email.
- What it can see
- Recipient email addresses and the content of the emails we send: invitations, alerts and scheduled report summaries. Summaries contain counts and upload names, not individual lead records.
- Where
- United States
Sentry
Never sees your uploaded lead data- What it does
- Error monitoring, to find and fix bugs.
- What it can see
- Technical error details, which can include IP address and browser information. We don't send uploaded lead data to Sentry.
- Where
- United States
Cloudflare
Never sees your uploaded lead data- What it does
- Bot protection (Turnstile) on the sign-in, sign-up and password-reset pages.
- What it can see
- IP address and browser signals used to tell people from automated traffic. Uploaded lead data never goes to Cloudflare.
- Where
- Global network
Changes to this list
We'll email account owners at least 30 days before we add or replace a subprocessor that handles uploaded lead data. Questions or objections: privacy@trafficdefenseiq.com.