Skip to content
Security

Subprocessors

The providers that process data for Countorra, each for one purpose. The Privacy Policy describes each one in full.

  • Supabase

    Database, sign-in and file storage.

    Receives: Your account, your financial records, your documents and your conversations with the assistant.

  • Google (sign-in)

    Sign in with Google, if you choose it.

    Receives: Google confirms who you are and shares your name, email address and profile picture. Nothing about your finances.

  • Vercel

    Hosting the website and the app's servers.

    Receives: Your requests, including your IP address, which it keeps in server logs.

  • Cloudflare

    DNS, and a proxy in front of countorra.com.

    Receives: Requests to that address, including your IP address.

  • Anthropic

    The AI assistant, when you use it.

    Receives: Your message and the records needed to answer it.

  • Plaid

    Bank connections, only if you connect a bank.

    Receives: Your bank sign-in, in Plaid's own window. Plaid provides Countorra with your accounts, balances and transactions, and, where you agree, holdings and card and loan details.

  • Stripe

    Billing for every plan and trial.

    Receives: Your card details, entered on Stripe's pages, and your workspace and account identifiers, plan and email address.

  • Google Cloud Document AI

    Reading documents that need it: a photo or scan, a W-2, or a form whose checked boxes must be read.

    Receives: That file, including everything printed on it. Nothing else about you or your account.

  • Amazon Web Services (Textract)

    Reading receipts, invoices and bills.

    Receives: That file, including everything printed on it. Nothing else about you or your account.

  • Resend

    Every email Countorra sends, and the receipts you forward.

    Receives: Your email address and each message, and the email you send to your receipts address.

  • Microsoft, Google, Notion and Dropbox

    Only for an integration you turn on, and Google Calendar and Meet when you book a call.

    Receives: What that integration needs, as the Privacy Policy describes for each one.

  • Apple

    Sign in with Apple, if you choose it; in the iPhone app, App Store purchases and notifications you turn on.

    Receives: As the Privacy Policy describes for the iPhone app.

  • Sentry

    Error and performance monitoring.

    Receives: Technical reports of what failed and where, and timings for a sample of requests. Never passwords, tokens, email addresses, amounts, documents, what you type or your IP address.