Sub- processors

Last updated: August 31, 2026

Running FieldStone means other companies handle some of your data on our behalf — the database that stores it, the network that delivers your texts, the model that drafts a reply. This page lists all of them, what each is used for, and what reaches it. It is the same list we answer security questionnaires from, so it stays current as integrations ship. How we use this data is covered in the Privacy Policy.

Who processes data for us

Every provider below processes data only on our instructions and for the purpose named. We do not sell personal information, and no provider on this list is permitted to use your data to train generalized AI models.

ProviderWhat we use it forWhat reaches itRegion
SupabasePrimary database, authentication, and file storageall customer records; contact details; message and email content; uploaded files and photosUnited States
VercelWeb application hostingrequest logs; IP addressesUnited States
RailwayAPI and real-time server hostingrequest logs; application logs (phone numbers masked to last four digits)United States
TwilioSMS and voice delivery, and phone numbersphone numbers; SMS bodies and MMS media; call audio in transit; call metadataUnited States
ResendTransactional and branded outbound emailemail addresses; subjects and bodies; attachmentsUnited States
OpenAILanguage models, embeddings, image understanding, audio transcription, and web searchcall transcripts; SMS and email bodies; contact and company details; uploaded photos and documents; Gmail and Google Drive text for features you enable; search queries built from contact and company namesUnited States
DeepgramTranscription of calls and recordingsaudio (held in memory, never stored); transcriptsUnited States
ElevenLabsText-to-speech for the voice assistantthe text the assistant speaksUnited States
PineconeSearch across notes, documents, and contactsembeddings and their metadata, which includes note, document, and contact textUnited States
FirecrawlReading public websites for company researchpublic company web content; website addressesUnited States
StripePayments and subscription billingbilling contact details; payment metadata (card details never reach FieldStone)United States
Intuit QuickBooksAccounting sync, when you connect itcustomers; invoices and estimates; payment recordsUnited States
GoogleCalendar, Gmail, Contacts, Drive, and Business Profile integrationscalendar events; email content; contacts; documents you choose; business profile and reviewsUnited States
Google Maps PlatformAddress autocompleteaddress text typed into an address fieldUnited States
JobberImporting clients, quotes, and jobs, when you connect itclients; quotes; jobsUnited States
Estimate RocketReceiving estimates, when you connect itestimate details; customer detailsUnited States
GranolaImporting meeting notes, when you connect itmeeting transcripts and summariesUnited States
ExpoPush notification delivery to the mobile appdevice push tokens; notification contentUnited States
ApplePush notification and Live Activity delivery on iOSdevice push tokens; notification contentUnited States
PostHogProduct analyticsuser and organization identifiers; high-level event properties (no message bodies)United States
SentryError monitoringerror context, with email addresses redacted and phone numbers masked before sendingUnited States

What is not on this list

Providers that never receive personal information are not listed — for example the weather service we call, which is given a city name and nothing else. Where a provider appears only because you chose to connect an account, the entry says so; disconnecting it in Integrations stops the flow.

Changes to this list

We update this page when a provider is added, removed, or starts receiving a different category of data. The date at the top of the page is the last time it changed. Material changes are also described in the Privacy Policy.

Contact Us

Questions about a provider on this list, or a request for our data processing terms? Reach out at fieldstoneapp@gmail.com.