Billable8 · Legal
Subprocessors
Effective October 9, 2026
These providers help Ops Automators operate Billable8 and may process customer personal data on our behalf. We limit each provider to the information needed for its job and require data-protection obligations appropriate to that work.
Current subprocessors
Scroll sideways to see all columns.
| Provider | Purpose | Processing location | Data involved |
|---|---|---|---|
| Vercel Inc. | Application hosting and delivery, operational logs, and file storage for task attachments and backup snapshots (Vercel Blob) | United States | Requests, account and workspace data handled by the application, limited server logs, uploaded task attachments, and backup snapshots |
| Hostinger | Server hosting for the active PostgreSQL database | Boston, United States | Account and workspace data stored in Billable8 |
| Neon, Inc. | Former database provider; retained recovery copies pending retirement | AWS us-east-2, Ohio, United States | Historical account and workspace data; not the active application database |
| Resend, Inc. | Transactional email delivery | United States | Recipient address and content of account, security, subscription-status, contact acknowledgment, and optional notification email |
| Stripe, Inc. | Subscription checkout, payment processing, invoices, and billing portal | United States and Stripe’s service locations | Billing contact, plan and seat metadata, payment and transaction information |
| Google LLC | Encrypted recovery archives in Google Drive; optional marketing-site analytics after consent, Google signup and sign-in, and personal Google Calendar connections | United States and Google’s service locations | Drive stores encrypted database and attachment recovery archives; the decryption key is stored separately, outside Drive. After analytics consent: public pages, campaigns, anonymous browser identifiers, signup events, and subscription payment/refund amounts, currencies and transaction identifiers. No private workspace content is sent to analytics. Signup and sign-in use identity data Google provides to authenticate your account. A separate calendar connection exchanges credentials, calendar selections, date ranges, and event data to display your schedule. |
| Microsoft Corporation | Optional Microsoft signup and sign-in, and personal Outlook or Microsoft 365 calendar connections | Microsoft’s service locations | Basic identity claims for sign-in and account linking. A separate calendar connection exchanges credentials, calendar selections, date ranges, and event data using read-only calendar permissions. Billable8 requests no mailbox content or file access. |
Google Analytics is used only on Billable8’s public marketing pages only after a visitor agrees. It never receives anything from inside the signed-in application: no client, project, hour or rate data. See cookie choices.
Changes to this list
We will update this page before a new subprocessor begins processing customer data. For a material new subprocessor, account owners will receive advance notice where required by the data processing addendum. If you reasonably object on data-protection grounds, contact us during the notice period so we can work through an alternative or the available termination option.
Questions
For provider security documentation, transfer safeguards, or a copy of Billable8’s DPA, use the contact form or email zach@opsautomators.com.