1. Subprocessors
These providers process personal data for us only to run the service, under written terms that require confidentiality and security. None may use customer data to train AI models.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Vercel, Inc. | Hosts the website, dashboard and hub APIs; Vercel Blob stores profile and organization images | Account data, request metadata (IP, user agent), uploaded avatar images | United States |
| DigitalOcean, LLC | Hosts the MCP port servers (qbo.toolports.com, jobber.toolports.com) | Connected-service content in transit, temporary uploads (purged within 24 hours if not attached), request logs | United States |
| Neon, Inc. (Databricks) | Managed Postgres database | Account, organization, API key hashes, encrypted OAuth tokens, connection settings, audit logs (90 days), billing status | United States |
| Stripe, Inc. | Subscription billing and payment processing | Billing contact, payment card (held by Stripe, not Toolports), invoices | United States |
| Resend (Plus Five Five, Inc.) | Transactional email (sign-in links, verification, billing and service notices) | Email address, name, message content | United States |
| [PLACEHOLDER: SMTP email provider set by SMTP_HOST] | Backup transactional email delivery | Email address, name, message content | [PLACEHOLDER] |
| Google LLC | Optional “Sign in with Google” | Name, email address, profile image | United States |
| Formspree, Inc. | Waitlist form submissions, when enabled | Email address and form fields | United States |
2. Integrations you connect
These are not our subprocessors. You choose to connect them, you have your own agreement with each, and Toolports exchanges data with them only on your and your agents’ instructions.
| Service | Purpose | Data | Location |
|---|---|---|---|
| Intuit Inc. (QuickBooks Online) | Customer-directed integration: the accounting system you connect; Toolports calls its API on your instructions | Your QuickBooks company data, under the scopes you authorize | United States |
| Jobber (Octopusapp Inc.) | Customer-directed integration: the field-service system you connect; Toolports calls its API on your instructions | Your Jobber account data, under the scopes you authorize | Canada / United States |
Your AI agent and its model provider (for example Anthropic, OpenAI, xAI or Cursor) are also your choice and are not Toolports subprocessors.
3. Changes
We update this page before adding or replacing a subprocessor. Customers with a DPA can ask for email notice and may object as described there. Email hello@toolports.com to subscribe.