Legal
Sub-processors
Last updated 8 August 2026
These are the third-party services we rely on to run CommunityTracker. Each one receives only what it needs to do its particular job. This page is referenced by our Privacy Policy.
Which of these can see your Google account data
If you have connected a Gmail or Outlook mailbox, this is the question that probably brought you here, so it goes first. Of the 22 providers listed below, exactly 2 can see data obtained from a connected mailbox:
- Supabase — Database, authentication and server-side functions. Hosted on AWS us-east-2 (Ohio, United States).
- Unipile — Brokers the connection to your Gmail or Outlook mailbox and holds the authorisation token. Sends the messages you approve and relays reply notifications back to us.
No other provider on this page receives data from a connected Google account. In particular, our AI providers do not — outreach is drafted from the prospect’s public post, never from anything in your mailbox.
Where our own systems run
- Database — Amazon Web Services, us-east-2 (Ohio, United States), via Supabase
- Website and application — Vercel (global edge network)
- Community-monitoring automation — A dedicated server in Mumbai, India (Hostinger). Public posts only; no access to connected mailboxes.
Core infrastructure
Runs the product itself. Everything you store with us lives here.
| Provider | What it does for us | Google data? |
|---|---|---|
| Supabase | Database, authentication and server-side functions. Hosted on AWS us-east-2 (Ohio, United States). | Yes |
| Vercel | Hosts this website and the web application. Serves the interface; your data is fetched by your browser directly from Supabase. | No |
| Hostinger | A dedicated server in Mumbai, India running our automation engine for community monitoring. It has no access to connected mailboxes. | No |
Email sending and mailbox connection
Only used if you connect a mailbox for outreach.
| Provider | What it does for us | Google data? |
|---|---|---|
| Unipile | Brokers the connection to your Gmail or Outlook mailbox and holds the authorisation token. Sends the messages you approve and relays reply notifications back to us. | Yes |
| Resend | Delivers our own transactional email to you — sign-in links, reports and product notices. Never used for your outreach. | No |
AI processing
Used to score public posts, suggest keywords and draft outreach copy. Every request is restricted to endpoints that do not retain it.
| Provider | What it does for us | Google data? |
|---|---|---|
| OpenRouter | Routes each request to a model provider and enforces our requirement that the provider does not retain it. Which provider serves a given request is decided at the time of the request. | No |
| Anthropic | Creator of the Claude models we use for most AI features — scoring public posts, suggesting keywords, and drafting outreach. | No |
| OpenAI and DeepSeek | Creators of the models we fall back to if the primary model is briefly unavailable, so a reply-drafting request still returns. | No |
| Amazon Web Services, Google Cloud and Microsoft Azure | Operate the zero-retention endpoints that actually serve those models to us. | No |
Data sources and enrichment
Used to collect the public posts you monitor and to find business contact details.
| Provider | What it does for us | Google data? |
|---|---|---|
| Apify | Collects public posts from community platforms. | No |
| Exa | Web search and content retrieval for research features. | No |
| Icypeas | Finds and verifies business email addresses. | No |
| Anymailfinder | Finds and verifies business email addresses. | No |
| Prospeo | Finds and verifies business email addresses. | No |
Business operations
Billing, support and understanding how the product is used.
| Provider | What it does for us | Google data? |
|---|---|---|
| Dodo Payments | Processes payments and manages subscriptions. Card details go to them directly and never reach our servers. | No |
| HubSpot | Customer records and the in-app support chat. | No |
| Microsoft Clarity | Anonymised usage analytics and session replay inside the application, so we can see where the interface confuses people. Message content and contact details are masked before they leave your browser. Not used on this public website. | No |
| Google Analytics | Aggregate visitor statistics for this public website — which pages get read, and which sites people arrive from. Configured with Google’s advertising and cross-device tracking features switched off, so it does not feed remarketing audiences. Not used inside the application. | No |
| Ahrefs Analytics | Visitor counts for this public website, used alongside our search-ranking tools. Cookieless, and not used inside the application. | No |
| Contentful | Stores the articles on our public blog. No customer data. | No |
| Calendly | Demo and onboarding call scheduling, if you book one. | No |
| ipapi.co | Approximate country lookup from IP address, used to show prices in a sensible currency. | No |
Changes to this list
We update this page when we add or remove a provider, and the date at the top reflects the current version. If you would like to be told in advance when the list changes, email support@communitytracker.ai and we will add you to the notification list.