Every company that touches carrier or driver data, and exactly what each one touches. There are four, and that is the whole list.
Last updated
Each of these is under a written agreement covering the same obligations we take on in our own data processing agreement. We give notice before a new one starts processing, so a carrier has a chance to object.
One of them is not only a subprocessor. Lemon Squeezy is our merchant of record, which means it is legally the seller of the subscription: it takes the payment, it handles US sales tax, and the receipt a carrier files comes from it rather than from us. That is why it is the only company on this list that sees a card, and why we never do.
| Company | What it does | Where | What it touches |
|---|---|---|---|
| Supabase | Database, file storage, authentication | United States | Everything the product holds: loads, events, coordinates, documents, driver names and mobile numbers, account email addresses. |
| Vercel | Application hosting | United States | Requests in transit, and standard server logs including IP addresses. No evidence is stored here. |
| Resend | Email delivery | United States | The contents of a detention notice or a sign-in link: the recipient address, the load details and the arrival time. No documents and no coordinates. |
| Lemon Squeezy | Payments, as merchant of record | United States | The account email address, the billing address and the card, because it is legally the seller. None of it reaches us: we hold only the plan and whether it is paid. |
There is no analytics provider, no advertising network, no session recording, no customer messaging widget and no error reporting service with access to request contents. Every one of those is a company that would be able to read a driver’s name, and none of them is worth that.
Write to privacy@primedispatchify.com and we will email you before this list changes.