Legal
Effective June 17, 2026
Subprocessors
To run OutBudget we rely on a small number of third-party services. Each one is bound by a data processing agreement and may only use your data on our instructions. The list below is authoritative and is updated whenever a subprocessor is added, removed, or changed.
Current subprocessors
| Service | Purpose | Data processed | Region |
|---|---|---|---|
| Supabase | Database, authentication, storage. | All account and financial data you create in the app, plus auth credentials (password hash, session tokens). | AWS eu-west-2 (London) |
| Vercel | Application hosting and edge delivery. | Request metadata (IP, user agent, URL). No financial data is stored here. | Global edge; primary region AWS eu-west-2 |
| Stripe | Payments (when paid plans launch). | Email, billing address, masked card details, payment metadata. OutBudget never stores full card numbers. | EU and US (per Stripe’s data processing terms) |
| Resend | Transactional email (signup confirmation, password reset, billing receipts). | Email address and the contents of the message. | EU |
| PostHog | Aggregated product analytics (only with your consent). | Pseudonymised event data: a random user ID (UUID), subscription tier, and signup date. No email address, name, or financial content. IP truncated. EU-hosted at eu.posthog.com. Only sent with your analytics consent. | EU |
| Telegram | Internal operator notifications for signups, bug reports, questions, and feature suggestions. Messages are delivered to the service operator only; no data is shared with other Telegram users. | For bug reports and support questions: full email address, user-submitted content, page URL, browser/viewport metadata, and timestamp. For signup alerts and feature suggestions: masked email (e.g. jo***@gmail.com) plus metadata only. | EU/US (Telegram Inc.) |
| Sentry | Error monitoring and short Session Replay snippets on errors. The browser SDK only loads with your analytics consent; the server SDK runs for all requests under legitimate interest to keep the service reliable. | Stack traces, page URL, browser/OS, timezone, locale. No IP address, cookies, or request headers (sendDefaultPii is disabled). When an error fires after consent, a masked DOM replay with text redacted and media blocked. | EU (Frankfurt) |
Notice of changes
We will publish any change to this list at least 30 days before it takes effect. If you are a DPA customer, you may object to a new subprocessor by replying to the change-notice email; if we cannot accommodate your objection, you may terminate without penalty for the unused portion of your subscription.
Related pages
Contact
Questions? Email support@outbudget.com.