Current subprocessors
Supabase
Authentication, Postgres database, storage, and server-side data operations
Data: Account, workspace, form, submission, and operational data
Vercel
Application hosting, deployments, edge runtime, and platform security
Data: Application traffic, logs, edge/runtime telemetry
Lemon Squeezy
Hosted checkout, subscriptions, merchant of record, tax, invoices, and billing webhooks
Data: Checkout, customer, subscription, tax, invoice, and webhook data
HubSpot
HubSpot contact creation, updates, notes, HubSpot avance, and integration readiness
Data: CRM contact properties, sync status, portal identifiers, and OAuth tokens
OAuth sign-in and related account authentication services
Data: Authentication identifiers and profile data when Google login is enabled
Calendly
Post-submit booking and scheduling flows configured by the customer
Data: Scheduling context when a workspace embeds or links scheduling
Customer-enabled tools
- If a contractor connects HubSpot, LeadForm sends CRM context according to that workspace configuration.
- If a contractor embeds Calendly or another scheduling flow, homeowners may interact directly with that provider.
- If a contractor adds external pixels or analytics later, the contractor should update notices and consent settings before launch.