Subprocessors
Last updated: April 10, 2026
We use a small set of third-party providers to operate IdeaScope. These providers may process personal data on our behalf in order to deliver the service.
| Provider | Purpose | Data involved | Notes | Privacy policy |
|---|---|---|---|---|
| Cloudflare | CDN, security, traffic protection, and edge/network services | Technical request data such as IP address, request metadata, and security-related logs | Used to protect and deliver the public website and application traffic | Cloudflare Privacy Policy |
| Supabase | Authentication and database | Account information, ideas, Decision Packs, saved content, and related service data | Used for core application data storage and authentication | Supabase Privacy Policy |
| Stripe | Payment processing | Billing and payment-related information | Full card details are processed by Stripe, not stored directly by IdeaScope | Stripe Privacy Policy |
| Vercel | Hosting and infrastructure | Technical request data such as IP address, logs, and application delivery metadata | Used to host and deliver parts of the application | Vercel Privacy Policy |
| Google (Analytics and Gmail) | Analytics and support/business email handling | Usage and device information for analytics; support or business email content and related metadata where messages are handled through Google email services | Used for Google Analytics and email handling workflows | Google Privacy Policy |
| Google AI (Gemini) | Idea exploration and Decision Pack generation | User inputs and generated content needed to process requests | Used for AI-powered product functionality currently in production. | Google Privacy Policy |
| OpenAI | Idea exploration and Decision Pack generation | User inputs and generated content needed to process requests | Used for AI-powered product functionality currently in production. | OpenAI Privacy Policy |
Cloudflare
Purpose: CDN, security, traffic protection, and edge/network services
Data involved: Technical request data such as IP address, request metadata, and security-related logs
Notes: Used to protect and deliver the public website and application traffic
Supabase
Purpose: Authentication and database
Data involved: Account information, ideas, Decision Packs, saved content, and related service data
Notes: Used for core application data storage and authentication
Stripe
Purpose: Payment processing
Data involved: Billing and payment-related information
Notes: Full card details are processed by Stripe, not stored directly by IdeaScope
Vercel
Purpose: Hosting and infrastructure
Data involved: Technical request data such as IP address, logs, and application delivery metadata
Notes: Used to host and deliver parts of the application
Google (Analytics and Gmail)
Purpose: Analytics and support/business email handling
Data involved: Usage and device information for analytics; support or business email content and related metadata where messages are handled through Google email services
Notes: Used for Google Analytics and email handling workflows
Google AI (Gemini)
Purpose: Idea exploration and Decision Pack generation
Data involved: User inputs and generated content needed to process requests
Notes: Used for AI-powered product functionality currently in production.
OpenAI
Purpose: Idea exploration and Decision Pack generation
Data involved: User inputs and generated content needed to process requests
Notes: Used for AI-powered product functionality currently in production.
This list may change as we improve or replace service providers. We aim to keep this page updated to reflect our current key subprocessors.