Legal
Subprocessors
Last updated: September 22, 2026
Jobflo runs on a small group of outside companies. This page lists every one of them, what each does for us, and exactly what data it gets. We keep it plain on purpose, because a page you cannot read is not a disclosure. If anything here is unclear, email privacy@jobflo.us.
1. Every account uses these
This is the whole list as of the “Last updated” date at the top of the page. If you have a Jobflo account, these companies handle some part of your data.
Vercel, Inc.
- What it does for us
- Runs the Jobflo website and app
- What it receives
- Every page request, and server logs that include IP addresses. Vercel does not get direct access to your database.
- Where
- US, with edge sites worldwide
Supabase, Inc.
- What it does for us
- Holds the database and handles your sign-in
- What it receives
- Everything you put into Jobflo: your account, your team, customers, jobs, invoices, addresses, notes, and settings. Your password is stored scrambled (hashed), never in plain text.
- Where
- US (us-east-1)
Cloudflare, Inc. (R2)
- What it does for us
- Stores the files you upload
- What it receives
- Job photos and videos, invoice PDFs, your logo, plus each file's name, size, and type. Buckets are private and links are signed and expire.
- Where
- US
Stripe, Inc.
- What it does for us
- Your Jobflo subscription, and the card payments your own customers make to you
- What it receives
- Your billing name and email, and payment amounts. Card numbers are typed into Stripe's own form, so we never see them. If you set up payouts, Stripe also holds the bank details you give it.
- Where
- US
Resend
- What it does for us
- Sends your email out, and receives email for the shared inbox
- What it receives
- Who the email goes to, the subject, the body, and attachments such as invoice PDFs. Delivery and bounce events. If you use the shared inbox, the mail people send to your in.jobflo.us address.
- Where
- US
Mapbox, Inc.
- What it does for us
- Map pictures, and turning a typed address into a point on a map
- What it receives
- The address text you typed, or map tile numbers. Never names, phone numbers, or job details. Every one of these calls is made by our server, so Mapbox never sees your IP address and never sees who you are.
- Where
- US
Anthropic, PBC (Claude)
- What it does for us
- The AI that reads things for you
- What it receives
- An invoice or template photo you scan. The text of what you said out loud (your phone turns speech into text first, so no recording is sent). Inbound email and call transcripts, when the inbox pulls a lead out of them. Questions typed into the chat box on jobflo.us. Anthropic does not train on this.
- Where
- US
PostHog, Inc.
- What it does for us
- Counts visits on our public website
- What it receives
- Pages viewed on the public jobflo.us pages, and the link that sent you there. After signup, five milestone events tagged with your account ID and nothing else. It does not run on your signed-in pages and it does not run inside the mobile app.
- Where
- US
Telegram
- What it does for us
- Sends a phone alert to the owner of Jobflo
- What it receives
- On signup: your business name, your email, your trade, and your team size. On a subscription: the plan and its status. On a payment: the amount and the billing email. Nothing about your customers or your jobs.
- Where
- Outside the US
Have I Been Pwned (Pwned Passwords)
- What it does for us
- Checks if a password you pick has shown up in a known breach
- What it receives
- Only the first five characters of a scrambled version of the password. Never the password, and nothing that says who you are.
- Where
- Global (Cloudflare network)
ImprovMX
- What it does for us
- Forwards mail sent to support@, privacy@, security@, and legal@jobflo.us to our inbox
- What it receives
- Any email you send to those addresses: who sent it, the subject, the body, and attachments.
- Where
- Outside the US
| Company | What it does for us | What it receives | Where |
|---|---|---|---|
| Vercel, Inc. | Runs the Jobflo website and app | Every page request, and server logs that include IP addresses. Vercel does not get direct access to your database. | US, with edge sites worldwide |
| Supabase, Inc. | Holds the database and handles your sign-in | Everything you put into Jobflo: your account, your team, customers, jobs, invoices, addresses, notes, and settings. Your password is stored scrambled (hashed), never in plain text. | US (us-east-1) |
| Cloudflare, Inc. (R2) | Stores the files you upload | Job photos and videos, invoice PDFs, your logo, plus each file's name, size, and type. Buckets are private and links are signed and expire. | US |
| Stripe, Inc. | Your Jobflo subscription, and the card payments your own customers make to you | Your billing name and email, and payment amounts. Card numbers are typed into Stripe's own form, so we never see them. If you set up payouts, Stripe also holds the bank details you give it. | US |
| Resend | Sends your email out, and receives email for the shared inbox | Who the email goes to, the subject, the body, and attachments such as invoice PDFs. Delivery and bounce events. If you use the shared inbox, the mail people send to your in.jobflo.us address. | US |
| Mapbox, Inc. | Map pictures, and turning a typed address into a point on a map | The address text you typed, or map tile numbers. Never names, phone numbers, or job details. Every one of these calls is made by our server, so Mapbox never sees your IP address and never sees who you are. | US |
| Anthropic, PBC (Claude) | The AI that reads things for you | An invoice or template photo you scan. The text of what you said out loud (your phone turns speech into text first, so no recording is sent). Inbound email and call transcripts, when the inbox pulls a lead out of them. Questions typed into the chat box on jobflo.us. Anthropic does not train on this. | US |
| PostHog, Inc. | Counts visits on our public website | Pages viewed on the public jobflo.us pages, and the link that sent you there. After signup, five milestone events tagged with your account ID and nothing else. It does not run on your signed-in pages and it does not run inside the mobile app. | US |
| Telegram | Sends a phone alert to the owner of Jobflo | On signup: your business name, your email, your trade, and your team size. On a subscription: the plan and its status. On a payment: the amount and the billing email. Nothing about your customers or your jobs. | Outside the US |
| Have I Been Pwned (Pwned Passwords) | Checks if a password you pick has shown up in a known breach | Only the first five characters of a scrambled version of the password. Never the password, and nothing that says who you are. | Global (Cloudflare network) |
| ImprovMX | Forwards mail sent to support@, privacy@, security@, and legal@jobflo.us to our inbox | Any email you send to those addresses: who sent it, the subject, the body, and attachments. | Outside the US |
2. Only if you switch the feature on
None of these are used unless you turn on the matching feature. If you never touch the AI phone assistant, Vapi and Twilio never see anything of yours.
Vapi
- What it does for us
- Runs the AI phone assistant that answers your calls
- What it receives
- The caller's phone number and what is said on the call, live. Vapi uses Deepgram to turn speech into text and OpenAI to decide what to say. The written transcript and a short summary come back into your Jobflo inbox.
- Where
- US
Twilio Inc.
- What it does for us
- Buys and holds the phone number the AI assistant answers on
- What it receives
- The phone number itself and the call routing behind it. As the carrier, Twilio also sees the caller's number and the length of the call.
- Where
- US
Intuit Inc. (QuickBooks Online)
- What it does for us
- Pushes your customers and invoices into QuickBooks
- What it receives
- For each record you send over: the customer's name, email, and phone, plus the invoice lines and amounts. Nothing is sent until you connect the account, and disconnecting stops it.
- Where
- US
RevenueCat, Inc.
- What it does for us
- Handles a subscription bought inside the iPhone app
- What it receives
- Your account ID and the purchase receipt Apple hands the app. No name, no email, no customer data. Apple takes the payment, so we never see the card.
- Where
- US
| Company | What it does for us | What it receives | Where |
|---|---|---|---|
| Vapi | Runs the AI phone assistant that answers your calls | The caller's phone number and what is said on the call, live. Vapi uses Deepgram to turn speech into text and OpenAI to decide what to say. The written transcript and a short summary come back into your Jobflo inbox. | US |
| Twilio Inc. | Buys and holds the phone number the AI assistant answers on | The phone number itself and the call routing behind it. As the carrier, Twilio also sees the caller's number and the length of the call. | US |
| Intuit Inc. (QuickBooks Online) | Pushes your customers and invoices into QuickBooks | For each record you send over: the customer's name, email, and phone, plus the invoice lines and amounts. Nothing is sent until you connect the account, and disconnecting stops it. | US |
| RevenueCat, Inc. | Handles a subscription bought inside the iPhone app | Your account ID and the purchase receipt Apple hands the app. No name, no email, no customer data. Apple takes the payment, so we never see the card. | US |
3. Built in, but switched off today
Two services are wired into the code and are not turned on right now. Both need a key that is not set, so neither one receives anything. We are listing them so that the day we do turn one on, you can see it here first.
- Sentry, crash reporting. If we switch it on, a crash would send the error and the line of code that broke, tagged with your account ID. Today no crash report leaves your device.
- Rewardful, affiliate referral tracking on our public website. If we switch it on, it would record that a referral link sent you to jobflo.us. Today the script does not load at all.
4. Things that are not on this list, and why
- Map tiles. If Mapbox is down, the map pictures come from CARTO instead. Our server fetches the picture and passes it on, so CARTO only ever sees our server asking for a square of map.
- Navigation. Tapping “Navigate” opens Google Maps or Apple Maps with the address filled in. That is a normal link you chose to tap, the same as typing the address in yourself.
- Notifications. If you turn them on, your own browser or phone handles delivery through Apple, Google, or Mozilla. We hand them the message, not your data.
5. How we pick a company
Before we let a vendor near customer data, we check that:
- They publish their own security and privacy policies
- They encrypt data in transit (TLS) and at rest
- They have audited compliance (SOC 2, ISO 27001, or the equivalent) where that applies to what they do
- Their published data processing terms line up with ours
- They get the least data they can get away with and still work
6. Notice of changes
We tell customers before we add or change a company on this list. The note goes to the billing email on file at least 30 days ahead, unless the change is urgent for security reasons.
If you do not want a new one handling your data, you can cancel before the change takes effect and we will refund any unused pre-paid time.
7. Their subprocessors
Some of the companies above use their own. Vercel and Supabase run on Amazon Web Services. Vapi uses Deepgram for speech-to-text and OpenAI for the words the assistant says. We do not keep a separate list of those, so check each company’s own privacy page, linked in the tables above.
8. Questions or audit requests
If you need a vendor-by-vendor data flow diagram, signed DPA, or security questionnaire response, email security@jobflo.us. We typically respond within 5 business days.
Questions about this page? Email support@jobflo.us.