Sub-processors
Last updated: April 30, 2026
HummingDeck uses a small set of third-party services to operate the platform. Each one is a sub-processor under the GDPR: they process personal data on our behalf, under our Data Processing Agreement, and only for the purposes set out in our customer agreements.
This page lists every active sub-processor, the data each one handles, and where they are based. For background on what we collect and how, see our privacy policy.
Operational sub-processors
| Service | Purpose | Privacy policy |
|---|---|---|
| Google Cloud Platform (Firebase + Cloud Storage + Cloud Run) | Hosting, authentication, file storage, application runtime | Link |
| Google Cloud SQL (PostgreSQL) | Primary application database | Link |
| FastSpring | Payment processing and subscription billing (merchant of record) | Link |
| Resend | Transactional email delivery (account, share notifications, password resets) | Link |
| Loops | Marketing email delivery for users who opt in | Link |
Consent-gated services
| Service | Purpose | Privacy policy |
|---|---|---|
| Google Analytics 4 | Aggregate usage analytics on the marketing website and in-app | Link |
| Microsoft Clarity | Session recordings and heatmaps for product research | Link |
| Ahrefs Web Analytics | Cookieless SEO traffic insights | Link |
| Microsoft Ads (Bing UET) | Conversion measurement for ads we run on Microsoft Advertising | Link |
International transfers
Several of our sub-processors are located in the United States. For transfers of EU/EEA personal data to those services, HummingDeck relies on the European Commission's Standard Contractual Clauses (Module Two, Controller-to-Processor) and supplementary measures where required, including encryption in transit and at rest.
Changes to this list
HummingDeck may add or change sub-processors over time. We will update this page when changes occur, and material additions of sub-processors that handle customer data will be communicated via email to the workspace owner of each affected account at least 30 days before they take effect.
If you would like to be notified by email when this page changes, contact hello@hummingdeck.com with the subject line "Sub-processor updates" and we will add you to the notification list.
Questions
For questions about this list or to request a copy of the data processing agreement we have with any of the listed sub-processors, contact hello@hummingdeck.com.