Subprocessors
The providers that host and run SourceTrack, and where your data is processed.
Last updated: 7 October 2026
SourceTrack uses the providers below to host and run the service. They process customer personal data on our behalf, under written agreements, as described in our Data Processing Addendum.
Subprocessors
| Provider | What it does | Data | Location |
|---|---|---|---|
| Supabase Inc. | Database, authentication and storage | Core customer data: accounts, workspace settings, attribution records, encrypted integration credentials | EU (Ireland) |
| Tinybird Inc. | Analytics event storage and queries | Visitor events sent by customers’ websites | EU (Frankfurt, Germany) |
| Railway Corp. | Application hosting for the API and background jobs | Data in transit and in memory while the service runs | EU (Netherlands) |
| Vercel Inc. | Hosts and delivers the dashboard web app | Dashboard requests, including users’ IP addresses in request logs | Global edge network |
| BunnyWay d.o.o. (bunny.net) | Content delivery network for tracking domains we manage on customers’ websites | Tracking requests in transit, including visitors’ IP addresses and user agents | Global edge network |
| Stripe | Payments and billing | Plan, billing status and payment details; card numbers are held by Stripe only | US / global |
| Sentry (Functional Software, Inc.) | Error monitoring | Technical error diagnostics from our servers | United States |
| Resend | Sign-up and password-reset emails, reports and service email | Recipient email address and message content | US |
“Stored in the EU” describes where core data is stored. It is not a claim that all processing happens in the EU, because some providers operate outside it. Where they do, we rely on an adequacy decision or the European Commission’s Standard Contractual Clauses.
Website only
Our marketing website (not the dashboard or the tracking script) uses Google Tag Manager (Google LLC) to load measurement tags, only after the visitor accepts in the cookie notice.
Platforms you choose to connect
When you connect an advertising or analytics platform, it receives or provides data at your direction and handles it under its own terms and privacy policy. These are not our subprocessors: Google (Ads, Search Console, Analytics 4, Tag Manager), Meta, Microsoft Advertising, LinkedIn, TikTok, OpenAI, Shopify, your own Stripe account, and alert destinations such as Slack. See section 7 of our Privacy Policy.
Changes to this list
We update this page before a new subprocessor starts processing customer personal data. To be told about changes in advance, email support@sourcetrack.ai with the subject “Subprocessor updates”.