SpendCue Subprocessors
Last updated: March 15, 2026
This page lists the third-party subprocessors and service providers that SpendCue may use to process customer personal data in connection with the Service.
SpendCue is provided by Jonas Wigertson, a sole proprietor operating under the trade name SpendCue.
We may update this list from time to time as our infrastructure and service providers change.
1. What Is a Subprocessor?
A subprocessor is a third-party service provider engaged by SpendCue to process personal data on behalf of our customers in connection with the Service.
2. Current Subprocessors
a. Supabase
Purpose: Database hosting, authentication, storage, and backend infrastructure
Data processed: Customer workspace data, account data, authentication-related data, attachments, and related metadata
b. Vercel
Purpose: Application hosting and deployment infrastructure
Data processed: Website and application delivery data, technical request data, logs, and related metadata
c. Resend
Purpose: Transactional email delivery
Data processed: Email addresses, email content, invitation emails, password reset emails, approval notifications, and other transactional communications
d. PostHog
Purpose: Product analytics and usage analytics
Data processed: Usage events, page views, feature interactions, technical and browser-related metadata, and similar analytics data
e. Sentry
Purpose: Error monitoring, debugging, and performance monitoring
Data processed: Error logs, crash reports, technical diagnostics, and related metadata
f. Stripe
Purpose: Payment processing and subscription billing
Data processed: Billing-related information, payment metadata, subscription status, invoicing details, and limited payment-related information provided by Stripe
3. How We Select Subprocessors
We use subprocessors to help us:
- operate and host the Service;
- authenticate users;
- send transactional emails;
- monitor errors and performance;
- analyse product usage; and
- process subscriptions and payments.
We aim to use subprocessors that provide appropriate technical and organisational measures to protect personal data.
4. International Data Transfers
Some subprocessors may process personal data outside the European Economic Area ("EEA"), the United Kingdom, or your local jurisdiction.
Where required by applicable law, we rely on appropriate safeguards for such transfers, such as:
- adequacy decisions;
- Standard Contractual Clauses; or
- other lawful transfer mechanisms.
5. Changes to This List
We may update this subprocessor list from time to time. Material changes may also be reflected in our Privacy Policy, Data Processing Addendum, or other legal documentation.
6. Contact
If you have questions about this subprocessor list, please contact:
SpendCue
Email: privacy@spendcue.com