FounderRoute legal
Subprocessors
FounderRoute relies on specialized providers for hosting, storage, authentication, AI inference, email, forms, and billing. Optional providers process data only when their feature is used.
Last updated August 27, 2026
Core service providers
| Provider | Purpose and data | Location |
|---|---|---|
| Vercel | Application hosting, serverless execution, request delivery, and technical logs. | United States and global infrastructure |
| Supabase | Postgres database, private and public file storage, realtime delivery, scheduled processing, and backups. | Primary project: East US (Ohio), United States |
| Clerk | Authentication, account identity, sessions, and security events. | United States |
| OpenRouter | AI gateway, model routing, request metadata, and zero-retention inference delivery. | United States and selected inference locations |
AI inference providers
OpenRouter routes requests to eligible infrastructure serving the model selected by FounderRoute or the user. Model families can include OpenAI, Google Gemini, DeepSeek, and Anthropic Claude. FounderRoute sends requests with provider data collection denied and zero-data-retention required. The exact serving provider can change for availability and privacy compliance; OpenRouter publishes its current zero-retention endpoint information.
Optional and commercial providers
| Provider | When used | Purpose and data |
|---|---|---|
| Resend | When service or confirmed newsletter email is sent, or a contact request is routed. | Email address, contact message, delivery, bounce, and complaint metadata. |
| Typeform | When a user connects Typeform or submits through an embedded form. | Connection credentials, form metadata, responses, and webhook events selected by the user. |
| Polar | When paid subscriptions are offered or purchased. | Checkout, customer, payment, tax, receipt, subscription, refund, and fraud-prevention data. Polar acts as merchant of record and may be an independent controller for some processing. |
Provider changes
Providers can change as FounderRoute develops. Material new subprocessors will be posted here before routine processing where reasonably possible. A customer with a reasonable data-protection objection may submit it through in-app support or privacy@founderroute.app during the notice period.