Sub-processors
Last updated: April 22, 2026
Invoice Link uses the sub-processors below to deliver the Service. This list is published to satisfy §4 of our Data Processing Addendum. By accepting our Terms of Service, you authorize us to engage these sub-processors on your behalf.
We will provide at least 30 days' notice of any new sub-processor we engage (via email to the primary contact on your account or a notice on this page). If you object, you may terminate your subscription for convenience before the change takes effect.
| Sub-processor | Purpose | Data categories | Location | Privacy policy |
|---|---|---|---|---|
| Stripe, Inc. | Payment processing, Connect payouts | Payment tokens, transaction metadata, card last-4 | United States | View |
| PayPal, Inc. | PayPal payments, partner payouts | Payment tokens, transaction metadata | United States | View |
| Apple Inc. | App Store subscription billing, push (APNs) | Subscription IDs, push tokens | United States | View |
| Google LLC | Play Billing, address autocomplete (Places API), Street View Static API, push (FCM), receipt OCR (Document AI) | Subscription IDs, customer addresses, push tokens, receipt photos submitted for OCR (vendor names, line items, totals) | United States | View |
| RevenueCat, Inc. | Mobile subscription entitlement management | Subscription IDs, entitlement status, pseudonymous user ID | United States | View |
| Postmark (ActiveCampaign / Wildbit) | Transactional email delivery (invoices, reminders, receipts) | Recipient email, email content, delivery metadata | United States | View |
| Railway Corp. | Backend API + database hosting | All service data at rest + in transit | United States | View |
| Vercel Inc. | Marketing site + invoice/receipt pages hosting, analytics | Request logs, IP addresses | United States | View |
| Expo (650 Industries, Inc.) | Push notification relay (via APNs/FCM), over-the-air updates | Push tokens, device identifiers, app version | United States | View |
| OpenAI, L.L.C. | AI assistant (optional — off by default) | Prompts + replies you send through the assistant. Not used for training. | United States | View |
| Rentcast (Realty Data LLC) | Property data enrichment for addresses you look up | Property addresses (no personal identifiers) | United States | View |
| Functional Software, Inc. (Sentry) | Crash + error reporting (mobile + server) | Stack traces, device + OS info, route paths, scrubbed user IDs (never invoice/client PII — see scrubPII redactor) | United States | View |
| Better Stack (Logtail) | Server log aggregation | Operational logs + request metadata. PII (emails, names, payment IDs) redacted by the log shipper before transmission. | European Union (frankfurt) — see DPA | View |
Infrastructure sub-processors
Our primary sub-processors (Railway, Vercel) in turn rely on Amazon Web Services (AWS) and Cloudflare for underlying compute, storage, and edge delivery. These are fourth-level relationships we don't directly contract with but are listed here for transparency.
Questions
Email privacy@invoicelinkapp.com with any questions about our sub-processors or to request a copy of our DPA.