Subprocessors
Last updated: May 11, 2026
To deliver Volunteer Shift Manager we engage the third-party service providers below as sub-processors. Each handles a specific, limited part of our service and is contractually bound (via the linked Data Processing Agreement) to use customer data only on our documented instructions and to maintain reasonable security safeguards.
All sub-processors are based in the United States. For visitors and customers in the EU, EEA, UK, or Switzerland, data transferred to these providers is covered by the European Commission's Standard Contractual Clauses (SCCs), included by reference in each provider's DPA.
Supabase, Inc.
- Purpose
- Database, authentication, file storage
- Data processed
- Coordinator and volunteer profiles, signups, messages, custom field answers
- Region
- United States (us-west-2)
- DPA
- View →
Vercel, Inc.
- Purpose
- Application hosting, edge network, build infrastructure
- Data processed
- All request data passes through Vercel; transient logs (IP, user agent, path) are retained per Vercel's defaults
- Region
- United States
- DPA
- View →
Stripe, Inc.
- Purpose
- Subscription billing and payment processing
- Data processed
- Coordinator name, email, billing address, and payment method (handled directly by Stripe; we never store full card numbers)
- Region
- United States
- DPA
- View →
Resend, Inc.
- Purpose
- Transactional and bulk email delivery
- Data processed
- Recipient name, email, message content, delivery status, bounce/complaint events
- Region
- United States
- DPA
- View →
Twilio, Inc.
- Purpose
- SMS reminders and inbound STOP keyword handling
- Data processed
- Recipient phone number (E.164), message content, delivery status
- Region
- United States
- DPA
- View →
Google LLC (Google Ads, Google Analytics)
- Purpose
- Aggregate website analytics and ad conversion measurement
- Data processed
- IP address (truncated), user agent, pages visited — only after the visitor accepts cookies (EU/EEA/UK visitors are asked first)
- Region
- United States
- DPA
- View →
Changes
We may add or replace sub-processors as the service evolves. We keep this page current as the canonical list. To be notified of material changes in advance, email hello@upspire.studio and we'll add you to the notification list.
To request a copy of our Data Processing Agreement for your organization, email hello@upspire.studio.