Subprocessors
Last updated: August 28, 2026
A subprocessor is a company we rely on that may process personal data in the course of delivering Followthrough. We keep the list short deliberately, and we publish all of it.
Before engaging a subprocessor we review its security and privacy practices, and we require written commitments covering the data it handles.
Current subprocessors
| Company | What it does for us | Location |
|---|---|---|
| Supabase | Application database and backend functions — stores account records, tracking identifiers and timestamps | United States |
| Google Cloud Platform | Pub/Sub message delivery for Gmail change notifications | United States |
| Cloudflare | Hosting, CDN and protection for our marketing site | United States |
Google is also the source of the mailbox data you authorise us to read, under your own agreement with Google, in addition to being a subprocessor for the notification pipeline above.
We do not currently use any advertising network, analytics platform, session-recording tool, or customer-messaging service that processes your personal data.
Changes to this list
We will update this page before a new subprocessor begins processing personal data. To be notified of changes, email [email protected] and we will add you to the notification list.