Subprocessors
SparkDesk uses these third-party services to host, secure and operate the product. We update this page when the list changes.
| Service | Purpose | Data | Location |
|---|---|---|---|
| Supabase | Database, authentication, file storage and server functions | All account and Customer Data | United States |
| Vercel | Marketing site hosting and cookieless marketing site analytics | Request metadata (IP address, browser) | United States and global edge network |
| Lovable | Web application hosting, including usage analytics scripts it adds to the app | Request metadata (IP address, browser) and page visits | United States and global edge network |
| Google Fonts | Delivering the fonts the app uses | Request metadata (IP address, browser) | Global |
| Postmark (ActiveCampaign) | Sending and receiving email | Email addresses and message content | United States |
| Stripe | Subscription payments and invoicing for SparkDesk plans | Billing contact and payment details | United States |
| OpenAI | AI features, when used | Content submitted with an AI request | United States |
| Anthropic | AI features, when configured | Content submitted with an AI request | United States |
| Google (Gemini API) | AI features, when configured | Content submitted with an AI request | United States |
| OpenRouter | AI features, when configured | Content submitted with an AI request | United States |
| ZeroBounce / NeverBounce | Email address validation during CRM enrichment, when used | Email addresses | United States |
| TurboDocx | Contract document generation, when enabled | Contract content | United States |
| Cloudflare | Bot protection (Turnstile) on signup and public forms | Device and browser signals, IP address | Global |
| PostHog | Product analytics inside the app and cookieless analytics on the marketing site. No session recording | In the app: user ID, workspace ID, pages visited, browser and device type, and product events. On the marketing site: pages visited, link clicks, campaign tags, browser and device type, and a daily hash of IP address and browser. No location | European Union |
| Unsplash, Pexels and Klipy | Image and GIF search inside documents and kudos | Search terms only | Global |
Services you connect
These are not our subprocessors. They receive data only when you connect them:
- Google (Gmail) and Microsoft 365, when you connect a mailbox
- Smartlead and other outreach tools, when you connect them
- Webhooks and API clients you configure
Questions about this page? Email hello@sparkdesk.io.
Also see: Terms of Service, Privacy Policy, Acceptable Use Policy