Suppliers who handle data
Last updated · Plain English first, then the detail under each heading.
The short version
These are the companies that handle personal data for QuotePaid, what each one does and where. Each has a written agreement with us. We’ll email businesses at least 30 days before we add or replace one.
01 The list
- SupabaseWhat it doesDatabase, logins and file storage: everything in the appWhereIreland (Amazon Web Services, Dublin). Supabase is a US company
- VercelWhat it doesRuns the website and the app; counts visitsWhereIreland (Dublin). Vercel is a US company
- StripeWhat it doesCard payments from your customers, and your payments to usWhereStripe Payments Europe (Ireland) and Stripe in the US
- ResendWhat it doesSends emails: quotes, invoices, reminders, account emailsWhereSent from Ireland; email logs kept in the US
- OpenRouterWhat it doesPasses voice quotes to OpenAI (speech to text) and the text to Anthropic (filling in the quote)WhereUnited States
- OpenAIWhat it doesTurns voice recordings into text; may keep them up to 30 days for abuse checksWhereUnited States
- AnthropicWhat it doesFills in a draft quote from the text and your price list item namesWhereUnited States
- CloudflareWhat it doesSpam check on our forms (Turnstile)WhereWorldwide network. Cloudflare is a US company
- TwilioNot used yetWhat it doesText message sign-in codesWhereUnited States
| Supplier | What it does | Where |
|---|---|---|
| Supabase | Database, logins and file storage: everything in the app | Ireland (Amazon Web Services, Dublin). Supabase is a US company |
| Vercel | Runs the website and the app; counts visits | Ireland (Dublin). Vercel is a US company |
| Stripe | Card payments from your customers, and your payments to us | Stripe Payments Europe (Ireland) and Stripe in the US |
| Resend | Sends emails: quotes, invoices, reminders, account emails | Sent from Ireland; email logs kept in the US |
| OpenRouter | Passes voice quotes to OpenAI (speech to text) and the text to Anthropic (filling in the quote) | United States |
| OpenAI | Turns voice recordings into text; may keep them up to 30 days for abuse checks | United States |
| Anthropic | Fills in a draft quote from the text and your price list item names | United States |
| Cloudflare | Spam check on our forms (Turnstile) | Worldwide network. Cloudflare is a US company |
| TwilioNot used yet | Text message sign-in codes | United States |
Where data reaches the United States, it is covered by the EU–US Data Privacy Framework where the supplier is certified, and by the EU’s standard contractual clauses in each supplier’s agreement.
02 Who isn’t on the list, and why
Alerts on your phone or computer go through the push service your browser uses (Apple, Google or Mozilla). Your browser chooses it, not us, and it sees only a device address and a message it can’t read. The voices in our website demo were made once by ElevenLabs and hold no personal data.
03 Changes to the list
Before we add or replace a supplier that handles your customers’ details, we email you at least 30 days ahead, as our data processing agreement says. To object, write to support@quotepaid.ie.