International processing
These providers may process information in Canada, the United States and other countries where they or their subprocessors operate. Their exact region and subprocessor chain can depend on the configured service plan.
1. Current provider categories
| Provider | Purpose | Data involved | Policy |
|---|---|---|---|
| Supabase | Authentication, PostgreSQL database, private file storage and related infrastructure | Account, workspace, integration and storage data | View |
| Vercel | Web hosting, serverless execution, delivery and operational logs | IP address, request and application data handled by serverless routes | View |
| OpenAI | AI generation, embeddings and audio transcription | Prompts, relevant workspace context, outputs and submitted audio | View |
| Stripe | Checkout, subscription, billing portal, receipts, tax and fraud support | Identity, contact, transaction and payment data; Fibly does not directly store full card details | View |
| RevenueCat | Verification and management of enabled Apple and Google store subscriptions | Fibly account identifier, store, products, purchase references, subscription status and renewal periods | View |
| Apple | Payment, subscriptions, renewal, cancellation and refunds for enabled App Store purchases | Store account and purchase data handled by the respective store | View |
| Sign-in, read-only Calendar connection, remotely hosted fonts and enabled Google Play subscriptions | OAuth identity, selected calendar information, tokens, font request data and store purchases | View | |
| Spotify | Optional music account connection, playlists and playback | Spotify account, playlist, device and playback information | View |
| Sentry | Optional error and performance diagnostics; session replay is disabled | Error, device, request and performance information | View |
2. Other recipients
- Browser push providers process push endpoints and encrypted notification delivery data when notifications are enabled.
- Supabase or its configured delivery providers send authentication and account emails.
- External iCalendar feed hosts receive a request when you ask Fibly to import or refresh their feed.
- Professional advisers, regulators, courts or law-enforcement bodies may receive limited information where legally required or necessary to protect rights and safety.
3. Changes
Fibly may replace or add providers as the service changes. This list will be updated before a new provider is used for materially different processing. Material privacy changes will also be described in the Privacy Policy or an in-product notice.