Sub-processors
Effective 2026-05-18
To deliver the Platform we share limited data with the following third-party services ("sub-processors"). Each is contractually bound to handle the data only for the purpose listed and to maintain security standards at least as strict as our own.
Sub-processors marked Optional only receive data when a Client Shop explicitly connects them in Settings. Required sub-processors are used for core Platform operation.
| Vendor | Purpose | Data shared | Region | Use |
|---|---|---|---|---|
| Supabase | Primary database (Postgres) and authentication | All Client Shop account data, End Customer records, audit logs | United States (AWS us-east-1) | Required |
| Vercel | Application hosting and edge functions | Request metadata (IP, user-agent) for routing and rate limiting | United States (global edge, U.S. origin) | Required |
| Stripe | Billing — subscriptions, one-time charges, invoicing | Client Shop business name + owner email + Stripe customer/subscription IDs. No End Customer data is sent to Stripe. | United States | Required |
| Resend or Postmark | Transactional email (account verification, password reset, receipts) | Client Shop owner email + email body | United States | Required |
| Quo | SMS delivery and call-tracking | End Customer name, phone number, message content | United States | Optional |
| GoHighLevel | Alternative SMS / VoIP delivery | End Customer name, phone number, email, message content | United States | Optional |
| Urable | Proposal generation for detailing / PPF / coating shops | End Customer name, phone, email, vehicle, service interest | United States | Optional |
| OrbisX | Job management for detailing / PPF / coating shops | End Customer name, phone, email, vehicle, service interest | United States / Canada | Optional |
| Tint Wiz | Job management for window-tint shops | End Customer name, phone, email, vehicle, service interest | United States | Optional |
| Housecall Pro | Job management for mobile / field-service shops | End Customer name, phone, email, vehicle, service interest | United States | Optional |
Changes to this list
We will notify Client Shops at least 30 days before adding a new sub-processor that will receive End Customer data, so each Client Shop has time to review and object if appropriate. Replacing an existing sub-processor with one providing equivalent services and security in the same category does not require advance notice.
Questions about this list: info@ptpautodetails.com