Sub-processors
Third parties that process personal data on behalf of Heardback (company in formation) to run Heardback. Askers are notified of changes as described in the data processing addendum. Entries marked "planned" are not yet in use.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Supabase | Database and file storage for answers, contact details (hashed and encrypted), and card images | All service data | ap-south-1 (Mumbai) |
| Railway (or equivalent host) | Runs the API | Data in transit, logs with truncated IPs | Singapore or India region |
| Vercel | Serves the website and survey front end; proxies API calls | Data in transit | Global edge, no personal data at rest |
| Anthropic | Interprets free-text replies and drafts questions | Reply text with phone numbers and emails removed; question text | United States; no training on our data |
| Resend | Sends receipt and card emails | Email address and message content | United States and European Union |
| Meta Platforms (WhatsApp Cloud API) | Sends and receives survey messages on WhatsApp, where the WhatsApp channel is used | Phone number and message content | Global; governed by Meta's terms |
| Stripe (planned) | Payments for response credits | Asker billing details; no card numbers touch our systems | United States and European Union |
| Sarvam AI (planned) | Speech-to-text for voice-note answers | Audio, deleted after transcription | India |
Last reviewed: 2026-09-08.