Skip to main content
← Back to Home

Subprocessor List

Last Updated: March 27, 2026

This page lists all third-party service providers ("subprocessors") that process personal data on behalf of AdBudgetBuddy. This disclosure fulfills our obligations under GDPR Article 28, which requires data controllers to maintain an up-to-date list of subprocessors and provide customers with prior notification of any changes.

GDPR Article 28 Notice

AdBudgetBuddy acts as a data processor with respect to data entered into the Service by our customers, and as a data controller with respect to account and billing data. All subprocessors listed below are bound by data processing agreements (DPAs) that require them to process data only on our documented instructions, implement appropriate security measures, and assist with data subject rights requests.

We will provide at least 30 days' prior written notice before adding or replacing a subprocessor. Customers may object to such changes by contacting privacy@adbudgetbuddy.com.

Clerk

Authentication and user management

Data Processed
User email addresses, names, profile photos, organization memberships, session tokens, device metadata
Location
United States
Transfer Mechanism
Standard Contractual Clauses (EU SCCs)

Stripe

Payment processing and subscription billing

Data Processed
Billing name, email address, payment card metadata (last 4 digits, expiry), billing address, subscription status, invoice history
Location
United States
Transfer Mechanism
Standard Contractual Clauses (EU SCCs)

Neon (PostgreSQL)

Primary database — stores all application data

Data Processed
All application data including user profiles, budget entries, actuals, advertiser accounts, audit logs, and organization records
Location
United States (AWS us-east-1)
Transfer Mechanism
Standard Contractual Clauses (EU SCCs)

Vercel

Cloud hosting and edge network for the web application

Data Processed
IP addresses, HTTP request logs, user-agent strings, performance metrics; application code and server-side rendering of pages
Location
United States (with global edge nodes)
Transfer Mechanism
Standard Contractual Clauses (EU SCCs)

PostHog

Product analytics and feature flag management

Data Processed
User identifiers (hashed), page views, feature usage events, session recordings (optional), A/B test assignments
Location
United States (or EU Cloud — customer choice)
Transfer Mechanism
Standard Contractual Clauses (EU SCCs) / EU Cloud available

Sentry

Error monitoring and performance tracing

Data Processed
Error stack traces, browser/OS metadata, user identifiers (when included in error context), HTTP request paths
Location
United States
Transfer Mechanism
Standard Contractual Clauses (EU SCCs)

Resend

Transactional and marketing email delivery

Data Processed
Recipient email addresses, email open/click events, unsubscribe status, email content for transactional messages
Location
United States
Transfer Mechanism
Standard Contractual Clauses (EU SCCs)

Inngest

Background job orchestration and workflow execution

Data Processed
Event payloads passed to background jobs (may include user IDs, organization IDs, and job-specific metadata such as advertiser IDs)
Location
United States
Transfer Mechanism
Standard Contractual Clauses (EU SCCs)

Subprocessor Changes

We review and update this list as our subprocessor relationships change. To receive notifications of changes, or to object to any new subprocessor, please contact us at privacy@adbudgetbuddy.com.

You can also review our full Privacy Policy and Data Retention Policy for more information on how we handle your data.