Legal
Subprocessors
Every third party that touches Polylane customer data, and exactly what each one handles.
Last updated: 11 October 2026
Current subprocessors
| Provider | Purpose | Data processed | Region |
|---|---|---|---|
| Supabase | Database, authentication, and file storage | Account email, planner content (projects, channels, tasks, calendar events), subscription status | Managed cloud hosting |
| Vercel | Application hosting and content delivery | Request metadata (IP address, user agent), which is processed in transit and not retained by us | Global edge network |
| Razorpay | Payments, annual access purchases, and subscription billing | Name, email, GSTIN where supplied, payment details (held by Razorpay, never by us) | India |
| Resend | Authentication and transactional email — verification codes, receipts, trial reminders, billing notices | Account email and message content | Global |
| PostHog | Product analytics — which features are used | Pseudonymous usage events. Loaded only after you accept analytics cookies | United States |
| Sentry | Error monitoring | Crash diagnostics, scrubbed of personal data before they leave your browser | Global |
| Optional sign-in and Google Calendar sync | Only if you connect it: your Google account email and the calendar events you choose to sync | Global | |
| Apple | Optional Sign in with Apple | Only if you use Apple sign-in: authentication identifiers, account email, and name when supplied | Global |
| Microsoft | Optional Outlook Calendar connection | Only if you connect it: your Microsoft account email and calendar events read or written through the connection | Global |
| Upstash | Rate limiting — stopping automated abuse of sign-up forms and the API | IP address, or account ID when signed in, kept as a request counter for a couple of minutes and then discarded | India |
Paddle payment reseller
Purchases through Paddle use Paddle as the merchant of record. It processes checkout contact, billing and payment information under its privacy notice. Polylane receives transaction identifiers, subscription status and payment metadata to provide access and billing support. Paddle operates internationally and describes those transfers in its privacy notice.
Changes
We will update this page before a new subprocessor starts handling customer data. If you have a data processing agreement with us and want advance notice by email, write to kreativish.ai@gmail.com and we will add you to the notification list.