Legal
Subprocessors
Version 2026-09-29 · last updated 29 September 2026
These are the outside services that handle personal data so FollowThroo can work, what each one gets, and where. Each receives only what its job needs. Some apply only when a workspace turns that feature on. When we add one, it's listed here first.
Services
| Service | What for | What it gets | Where |
|---|---|---|---|
| Vercel | Hosts the web app and runs its server code; stores private files (email attachments, data exports). | Everything the app processes, in transit and in memory; uploaded attachments and exports at rest. | United States and edge regions |
| Supabase | The database. | Account, workspace, lead, campaign and message data at rest. Credentials are encrypted before they reach it. | Australia (Sydney) |
| Upstash | Job scheduling (QStash) and rate-limit counters (Redis). | Job identifiers and counters; no message content. | Configurable region |
| OpenRouter, and the AI model providers it routes to | AI features: drafting replies, classifying reply intent, LinkedIn message writing, post writing, and questions about reports. | The text needed for that task — for reply classification up to 2,000 characters of a lead's reply; for report questions, aggregate numbers only (no names or messages). | United States and the model provider's regions |
| Anthropic | AI features, where configured instead of OpenRouter.Only on deployments configured to use it directly. | As for OpenRouter. | United States |
| Sign in with Google; sending and reading mail for connected Gmail mailboxes; Google Analytics.Gmail when you connect it; Analytics only if you allow it. | Your Google account identity; mail sent and replies received on connected mailboxes; analytics only with consent. | Global | |
| Zoho | Sign in with Zoho; sending and reading mail for connected Zoho mailboxes; our own system email (sign-in links, invitations, notices). | Your Zoho identity; mail on connected mailboxes; system email recipients. | India |
| Razorpay | Payments. | Name, email, and payment details you enter in Razorpay's own checkout — card numbers never reach FollowThroo. | India |
| Twilio / Meta (WhatsApp Business) | Sending and receiving WhatsApp messages.Only if a workspace connects WhatsApp. | Recipient phone numbers and message content. | Global |
| Sign in with LinkedIn and posting on your behalf. Invitations and messages are sent by the desktop app on your own computer, not by our servers.Only if you connect LinkedIn. | Your LinkedIn identity and the posts you publish. | Global | |
| Meta, Google Ads and lead marketplaces (IndiaMART, JustDial, Sulekha, TradeIndia) | Receiving new leads from forms and marketplaces.Only for lead sources a workspace connects. | The lead details those sources send. | Varies by source |
| Cloudflare | Public DNS lookups to check sending domains' SPF, DKIM, DMARC and MX records. | Domain names only. | Global |
| GoDaddy (white-labelled reseller storefront) | Registering sending domains bought through the storefront.Only if you buy a domain there. | The details you give the storefront at checkout. | United States |
| Google Fonts | Serves the fonts the website and app use. | Your IP address and browser details, as with any web request. Sets no cookies. | Global |
What changed
- 2026-09-29 — First published.