# Subprocessors

_Acme Notes · Last updated: October 7, 2026_

## 1. About this list

Acme Labs ApS uses the third-party service providers ("subprocessors") listed below to provide Acme Notes. A subprocessor processes personal data on our behalf and only on our instructions. We have a written agreement with each of them that requires them to protect the data at least as well as we do.

This list covers the providers that process personal data in our product. Providers that only process data on our marketing website, or that act as independent controllers (such as app stores and "Sign in with" providers), are described in our Privacy Policy.

## 2. Current subprocessors

| Subprocessor | Purpose | Personal data | Location | Terms |
| --- | --- | --- | --- | --- |
| **Intercom** (Intercom R&D Unlimited Company) | Live chat, support conversations and in-app messages. | Contact details, Communications, Identifiers, Usage data, Device and technical data | European Union | [DPA](https://www.intercom.com/legal/data-processing-agreement) |
| **OpenAI** (OpenAI, L.L.C. / OpenAI Ireland Ltd) | Generates AI responses for features you use. | Content you provide | United States (SCCs) | [DPA](https://openai.com/policies/data-processing-addendum/) |
| **PostHog** (PostHog, Inc.) | Product analytics, feature flags and session replay. | Identifiers, Usage data, Device and technical data, Approximate location | European Union | [DPA](https://posthog.com/dpa) |
| **Resend** (Resend, Inc.) | Sends account and transactional emails. | Contact details, Communications | United States (SCCs) | [DPA](https://resend.com/legal/dpa) |
| **Stripe** (Stripe, Inc. and Stripe Payments Europe, Ltd.) | Processes payments and subscriptions and prevents fraud. | Contact details, Payment and transaction data, Identifiers, Device and technical data | United States (SCCs) | [DPA](https://stripe.com/legal/dpa) |
| **Supabase** (Supabase, Inc.) | Hosts the application database, user authentication and uploaded files. | Identifiers, Contact details, Account information, Content you provide | Frankfurt, Germany | [DPA](https://supabase.com/legal/dpa) |

## 3. International transfers

Where a subprocessor processes personal data outside the European Economic Area or the United Kingdom in a country without an adequacy decision, the transfer is protected by the European Commission's Standard Contractual Clauses (marked "SCCs" above) and, where applicable, the UK International Data Transfer Addendum, together with supplementary measures where needed.

## 4. Changes to our subprocessors

We update this page before we start using a new subprocessor. Customers who have signed our Data Processing Agreement can ask to be notified of changes by emailing privacy@acmenotes.example, and may object to a new subprocessor on reasonable data protection grounds as described in that agreement.

## 5. Contact us

Questions about our subprocessors can be sent to privacy@acmenotes.example.