Subprocessors
Last updated: June 13, 2026
To deliver our service, TideReply engages the third-party subprocessors listed below. A subprocessor is a company we use to process personal data on behalf of our business customers. We do not sell your data to any third party. Each subprocessor is engaged under a data processing agreement and is contractually required to protect your data, with one exception: the optional Telegram integration, described in the note below the table.
None of these providers use your data to train their own models; each processes data solely to deliver the service. This list is incorporated by reference into our Privacy Policy. Where a subprocessor processes data outside the European Economic Area (EEA), the transfer is covered by an appropriate safeguard such as the Standard Contractual Clauses.
| Subprocessor | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, file storage, and realtime infrastructure | EU (Frankfurt) |
| Vercel | Application hosting, edge delivery, and serverless compute | Global edge; serverless compute in EU (Frankfurt) |
| Cloudflare | Bot and abuse protection (Turnstile challenge) on sign-in, sign-up, and password-reset forms | Global edge network (US-based company) |
| Upstash | Redis-based rate limiting, abuse protection, and short-lived response caching | EU (Frankfurt) |
| OpenAI | Text embeddings for semantic search | United States |
| Anthropic | Large language model (Claude) for chatbot responses and other AI-powered features | United States |
| PostHog | Product analytics | EU |
| Sentry | Error monitoring and alerting (no session replay) | EU (Germany) |
| Resend | Transactional email delivery (escalation and account notifications) | United States |
| Firecrawl | Website crawling for knowledge-base ingestion | United States |
| Telegram | Optional escalation notifications, when enabled by the business customer (see note below) | International (non-EEA) |
| Stripe | Payment processing and subscription billing for business customers | United States / EU |
A note on the optional Telegram integration
Telegram notifications are off by default and are enabled only if a business customer connects Telegram in their settings. Telegram is a consumer messaging platform that does not offer a data processing agreement and stores data across multiple jurisdictions outside the EEA under its own terms. We therefore treat Telegram as an independent recipient rather than a contracted subprocessor. Business customers who enable Telegram notifications should be aware that conversation links and a short preview of the visitor's message are sent to Telegram's international infrastructure, and should reflect this in their own privacy disclosures.
Changes to this list
We keep this list current and update the date above whenever a subprocessor is added, removed, or replaced. We encourage business customers to review this page periodically for the latest information.
Questions
For questions about our subprocessors or data practices, contact us at support@tidereply.com.