Tailgate Books, operated by Measureable Media LLC.
Last updated: October 14, 2026.
Tailgate Books uses the vendors below to run the app. Each processes data under written terms, including the vendor's data-processing agreement where it offers one, that limit its use of the data to providing its service to us, except that Stripe, and our email provider as to its delivery records, also use some data as independent controllers for their own purposes, such as preventing fraud and abuse, verifying identity, securing and improving their services, and meeting legal requirements, under their own privacy policies.
| Vendor | Function | Data involved | Location and role |
|---|---|---|---|
| Supabase | Database, authentication, file storage, backups, server functions, and storage of our secret keys | All of your content and account data | United States (AWS us-west-2, Oregon). Subprocessor. |
| Stripe | Subscription billing and sales tax; card payments from your customers to your own Stripe account; identity verification for that account | Your billing and payment data; identity and bank details you give Stripe directly; a paying customer's name, email address, and card details | United States; Stripe may transfer data to its affiliates and subprocessors in other countries. Processor for us, and an independent controller for fraud prevention, identity verification, legal compliance, and improving its services (PCI-DSS compliant). |
| Anthropic | AI: receipt reading only | Receipt images, which may show your name, a store account number, or the last four digits of a card | Its terms do not limit processing to the United States. Subprocessor. No training on submitted data; kept only for a limited period under its commercial terms (longer only where needed to enforce its usage policies). |
| Resend | Transactional email delivery and inbound receipt forwarding | Your and your customers' email addresses; document email content; forwarded receipt emails | United States (us-east-1). Also keeps delivery records (such as sender and recipient addresses) as an independent controller to operate and secure its service. Subprocessor. |
| Sentry | Error and crash reporting | Crash and error reports tagged with an internal user ID; configured not to collect personal information | United States; reports kept about 90 days. Subprocessor. |
| Netlify | Hosts our website and web app and serves the page where customers view documents | Page requests, including IP addresses. Stores no documents. | U.S. company; pages are delivered through a global network, but no service data is stored outside the United States. Its own request logs, which include viewers' IP addresses, are kept for up to about a year. Subprocessor. |
| Google Workspace | Mailbox that receives messages sent to our support, privacy and legal addresses | The contents of emails you or a customer send us | United States (data stored in the U.S. region). Subprocessor. |
| GitHub, Expo, Namecheap | Source code hosting; building and updating our apps; our domain name and DNS | Our own code and configuration; no customer data | United States. Service providers to us. |
| Apple, Google | App distribution; speech recognition on phones and in Chrome | Dictation audio where your device or browser sends it | Independent providers under their own terms; not our subprocessors. |
Service data is stored in the United States, and so is the mailbox for email sent to our support, privacy and legal addresses. Some vendors, such as Stripe, our AI provider, and our web host, may process or access data from other countries under the transfer terms of their data-processing agreements.
We will give you at least 30 days' advance notice before a new vendor of ours begins to process customer data, on this page and by email, as described in Section 7.6 of our Terms of Use, and you may object by canceling your subscription before the change takes effect. Each of our vendors also uses its own subprocessors, which it lists and updates on its own website under its own notice terms.
Questions about this list or our data practices can be sent to privacy@gettailgatebooks.com.