Legal
Subprocessors
The companies that process data on MetricDeck's behalf, only to run the service and only on our instructions. We'll update this page before adding a new one.
Effective 12 October 2026
| Provider | What it does for us | Data it handles | Where |
|---|---|---|---|
| Vercel | Hosts the website and the app, and runs the code that answers each request | Everything you see or send while using the app; request logs; page-visit counts (Vercel Web Analytics: no cookies or IP addresses kept) | United States, with a global edge network |
| Supabase | Our database, and signing in (passwords and two-factor login) | All stored data: your account, projects, synced data, reports | Mumbai, India (Amazon Web Services, through Supabase) |
| Trigger.dev | Runs the background jobs: nightly syncs, hourly uptime checks, AI summaries | The data those jobs read and write; job logs | United States (Virginia) |
| Anthropic | Writes AI summaries, alert explanations and search-term reviews | The numbers and names described under "What goes to AI" in our privacy policy. Not used to train models | United States |
| Resend | Sends account emails: sign-up and reset codes, security notices, invitations to a workspace | Your email address (or the address you invite) and the message | Sent from Tokyo, Japan (company in the United States) |
| Sentry | Tells us when a page or request fails, so we can fix it | Error reports: what failed and where, the page's address with any secret part removed, and the browser and device type. Set not to collect cookies or IP addresses. Kept 30 days | United States |
| PageSpeed Insights measures the speed of pages you watch; the favicon service shows a site's icon; Google Analytics counts visits to our public website | The addresses of the pages and sites you watch; for website visits, the page, the site you came from, an analytics cookie, your browser, device and approximate location. Never anything from the app or the data you connect | United States and Google's global network | |
| Microsoft | Clarity shows how visitors use our public website (heatmaps and session recordings) | On public website pages only: scrolls, clicks and mouse movement, the page, browser, device and approximate location, with what's typed in forms hidden. Never anything from the app or the data you connect | United States |
Not subprocessors, but worth knowing
Google (Search Console, Analytics, Ads) and OpenAI (OpenAI Ads) are the platforms you connect: we read from them on your behalf, under their own terms with you. Dodo Payments sells paid plans as the merchant of record: it is the seller of your subscription and handles your card and tax details directly, under its own terms with you.
See also our privacy policy. Questions to hello@metricdeck.app.