Subprocessors
Effective date: 19 August 2026
Last updated: 19 August 2026
This page lists the third parties Convertlyft LLC engages to process personal data on behalf of its customers, as referenced in our Privacy Policy and Data Processing Agreement §4.
We notify customers by email at least 30 days before adding a subprocessor. During that period a customer may object on reasonable data-protection grounds under DPA §4.
Infrastructure
| Subprocessor | What it does | Processing location |
|---|---|---|
| Vercel | Application hosting, delivery and serverless execution | United States |
| Supabase | Primary database, authentication, and file storage | Germany |
Service delivery
| Subprocessor | What it does | Data involved |
|---|---|---|
| Stripe | Processes payments for paid plans and AI credit top-ups, and hosts the billing and cancellation pages | Card details (entered on Stripe, never stored by us), billing address, and transaction history |
| Resend | Sends transactional email — sign-in, password reset, and the daily digest | Recipient email address and message content |
| Pipedream | Brokers the OAuth credentials for advertising and analytics channels a customer connects | Access and refresh tokens for the customer's own connected accounts |
| DataForSEO | Supplies search, ranking and SERP data | Domains and keywords a customer asks about; no visitor data |
| OpenRouter | Routes the model calls that narrate operator reports | Report content, which may include page paths and aggregate metrics |
Not used
We do not currently engage a third-party support-desk tool, and we run no third-party advertising or product-analytics trackers on convertlyft.com.
Questions
Write to privacy@convertlyft.com.
Convertlyft LLC, Dubai, United Arab Emirates