Subprocessors
Version 5. Effective October 25, 2026.
A subprocessor is a company we use to run Sondola that may handle personal data in the course of doing so. This page lists the subprocessors Sondola Inc. uses today, what each one does and what data it handles.
About the "In short" summaries. Sections marked In short are plain-English summaries. They do not change what this page or our agreements say.
In short. Your numbers are stored at rest in one database in the United States, apart from the emails you choose to send. A small number of vendors host, deliver and email for us. We tell you at least 30 days before a new one handles your data, and you can object.
1. What is not on this list
Three things are commonly confused with subprocessors, and are not:
- The tools you connect. Stripe, RevenueCat, Mercury, QuickBooks, Meta Ads and the rest are your vendors under your agreement with them. We read from them on your instruction. They are not our subprocessors, and section 4.5 of the Terms says so.
- An AI assistant you point at Sondola. It is a Third-Party Service you chose. Your assistant asks our MCP server for data, and only for metrics your workspace has marked exposable.
- An AI key you bring. If your workspace adds its own Anthropic or OpenAI key, AI features run on your account with that provider, under your agreement with it. That provider is then your vendor for those requests, not our subprocessor.
2. Current subprocessors
| Vendor | What they do for us | Data they handle | Location |
|---|---|---|---|
| Supabase | Database, authentication, file storage, and the scheduled jobs that read your connected tools. | Account Data and Customer Data. | United States, AWS us-west-1. |
| Cloudflare | Hosts and serves the marketing site at sondola.com, and provides network services. | Requests and responses in transit. | Cloudflare's global edge network. |
| Lovable | Builds and hosts the web app at app.sondola.com. | Requests and responses in transit. Lovable does not hold your metrics at rest. | United States and its content delivery network's global edge. |
| Resend | Sends Sondola's email: sign-in links, invitations, alerts and investor updates. | Recipient email addresses and the content of each email, which for an alert or an investor update includes the figures it reports. | United States. |
| Mailgun | Receives email sent to sondola.com addresses and forwards it to our inbox. | The content of messages sent to us, including sender and recipient addresses and attachments. | United States. |
| Google Workspace | The inbox where we read support, privacy, legal and security email. | The content of messages sent to us, including sender and recipient addresses and attachments. | United States. |
| Anthropic and OpenAI | Power connector suggestions, when a workspace owner asks for them and has not added their own AI key. One of the two is in use at any time. | The names of the events recorded in the connected tool and the definitions of the workspace's metrics only. Never a figure, and never a credential. Our contracts with them prohibit training a model on this data. | United States. |
| PostHog | Product analytics and session replay on the marketing site at sondola.com, so we can see which pages are read and where people give up. Only with your consent, and only on that site. | Usage Data: pages viewed, links clicked, referring site, and session replays with form fields and typed text masked in your browser before they are sent. No Account Data and no Customer Data. | United States. |
Where your numbers are. Customer Data at rest in the Service is stored in Supabase, in AWS us-west-1. Figures also travel in the emails you choose to send through Resend, such as alerts and investor updates, and in any message you send us yourself.
Errors. Errors in the product are recorded by Sondola itself, in the same database. We do not send them to an outside error-monitoring service.
Analytics you control. PostHog is the only subprocessor you can switch off from the cookie banner. It is off until you turn it on, and the Cookie choices link in the footer of any page changes your answer at any time. It does not run inside the product at app.sondola.com, and it does not receive the numbers in your workspace. The AI provider is not involved unless a workspace owner asks for suggestions, and adding your own key takes us out of that path.
Transfers. Where personal data from the European Economic Area, the United Kingdom or Switzerland reaches these vendors, we rely on each vendor's data processing terms, which include the Standard Contractual Clauses and the UK Addendum where required.
3. Payments
Sondola does not take payments yet. We will add our payment processor to this page, and email account owners, at least 30 days before it handles any data.
4. Changes
We will post a new subprocessor here, and email the account owner of each workspace, at least 30 days before it starts handling Customer Data.
If you object to a new subprocessor on reasonable data protection grounds, tell us at legal@sondola.com before it takes effect. We will discuss it with you in good faith. If we cannot resolve your objection, you may terminate the affected Service before the change takes effect, without penalty, and we will refund any prepaid fees for the unused part of your term.
5. Questions
Questions about this list and the contracts behind it: legal@sondola.com. To report a security issue: security@sondola.com.
What changed in version 5
- Cloudflare, Mailgun and Google Workspace are now listed.
- Lovable's role is narrowed to building and hosting the web app at app.sondola.com.
- The page no longer says it is the whole list, and it says where figures can appear outside the database.
- A payments section says we do not take payments yet and will list our payment processor at least 30 days before it handles any data.
- The objection process now says we will discuss an objection first, and keeps termination with a refund of prepaid unused fees.
Previous versions: version 1, published September 1, 2026. PostHog was added in version 2, on September 15, 2026. Resend, Sentry, Anthropic and OpenAI were added in version 3, and Supabase no longer sent email. Sentry was removed in version 4, on September 23, 2026, when error monitoring moved in-house. Version 5, effective October 25, 2026, lists Cloudflare, Mailgun and Google Workspace, and narrows Lovable's role to the app.