| Sub-Processor | Purpose / Function | Data Categories | Location / Jurisdiction | Privacy Policy |
|---|---|---|---|---|
| Stripe, Inc. | Payment processing, subscription billing | Name, email, billing address, payment method (tokenized card reference, last-4 / brand / expiry), subscription status. FlipBooks never receives full card numbers or CVVs. | Ireland (EU) + United States | stripe.com/privacy |
| Plaid Inc. | Bank/transaction sync (account linking, transaction retrieval) | Bank credentials (collected via OAuth in Plaid Link, never to FlipBooks), transaction data, masked account and routing numbers, account type, institution name | United States | plaid.com/legal |
| eBay Inc. | Order import (Developer API) | OAuth scopes you authorize, seller account ID, order data (orders, listings, fees, payouts) for the connected seller account | United States | ebay.com privacy notice |
| Resend, Inc. | Transactional email delivery | Recipient name, email address, and email content (receipts, password resets, security alerts, policy-change notices) | United States | resend.com privacy |
| Supabase, Inc. | Database + auth + storage (Postgres with Row-Level Security) | All user data: account identifiers, email, hashed password, inventory, transactions, uploaded receipts, settings | United States (us-east-1) | supabase.com/privacy |
| Anthropic PBC | AI receipt parsing (Claude API for OCR & categorization) | Receipt images, parsed text. No account identifiers are sent. Data is not used to train Anthropic models. | United States | anthropic.com privacy |
| Netlify, Inc. | Hosting + serverless functions (CDN) | IP addresses, request logs (user agent, timestamps, requested paths) and function execution logs | United States | netlify.com/privacy |
Analytics: At the time of this update, FlipBooks does not load a third-party analytics SDK (Google Analytics, Plausible, Mixpanel, or similar) on public pages. If we add analytics in the future, we will update this page and the Privacy Policy before the feature is deployed.
Change notice: We provide 30 days' notice via email and the dashboard before adding a new sub-processor that will process personal information. We also post sub-processor changes on this page. If you object, your only remedy is to terminate your account under the Terms of Service.
Questions? Email useflipbooks@gmail.com or submit a data subject request.