Subprocessors
Last updated: October 31, 2026
A subprocessor is a company we use to provide the Leads 2 Build platform that receives personal information our customers keep in it. This page lists every one, what we use it for, what it receives and where it processes it. We share information with each only to the extent needed for the purpose shown.
We do not use bank-linking services today. If we add one — or any other subprocessor — we update this page and email account owners at least 30 days before it starts receiving customer personal information, as our Data Processing Addendum commits. To object to a new subprocessor, write to legal@leads2build.com.
1. Used for every account
These vendors run the Service. Every account's data passes through them.
| Vendor | What we use it for | Personal data it receives | Location |
|---|---|---|---|
| Vercel Inc. | Hosting for the web app and its server functions and scheduled jobs; holds application configuration secrets | All data passing through the app in transit; short-lived server logs | United States |
| Supabase Inc. | Application database, realtime updates and part of file storage | All account data: users, contacts, leads, projects, estimates, invoices, messages, call records and transcripts, audit logs | United States (AWS us-east-1) |
| Clerk Inc. | Sign-in, two-step verification and sessions | Names, email addresses, phone numbers, sign-in and session events | United States |
| Cloudflare, Inc. | Storage for photos, documents and call recordings (R2); encrypted off-site database backups; relay servers that carry in-app call audio and video when a direct connection is not possible | Uploaded files and their location tags, call recordings, encrypted backup copies of the database, call media in transit (encrypted) | United States; relay servers on Cloudflare's global network |
| Mailgun Technologies, Inc. (Sinch) | Sending email from the platform and receiving replies | Email addresses, message content, delivery and open events | United States |
| Twilio Inc. | Text messages, phone calls, phone numbers, phone-call recording and transcription, carrier (A2P 10DLC) registration | Phone numbers, message content, call recordings and transcripts, business registration details | United States |
| Stripe, Inc. | Subscription billing; customer invoice payments through Stripe Connect; payouts to our sales representatives | Billing contacts and payment details (card and bank details are held by Stripe, never by us) | United States |
| Google LLC (Workspace) | Our own email, calendar and video meetings, including recordings and notes of meetings we hold with prospects and customers | Correspondence with us, meeting invitations, meeting recordings and notes | United States |
| Anthropic, PBC | AI coding assistant our engineering uses to build and support the Service; it can see account data while a problem is being investigated | Limited account data viewed during development and support | United States |
2. Used when a feature is in use
These vendors receive data only when the feature named is used — for example, weather is fetched only for a scheduled job site.
| Vendor | What we use it for | Personal data it receives | Location |
|---|---|---|---|
| Google LLC (Maps Platform) | Address suggestions, maps and geocoding | Addresses typed or shown on a map | United States |
| Google LLC (Analytics) | Visit statistics on our marketing website, loaded only after you accept analytics cookies | Pages viewed, browser and device details, a pseudonymous visitor identifier | United States |
| HighLevel, Inc. | CRM records and message delivery for accounts we have set up on it | Contacts, opportunities, messages, notes and media for those accounts | United States |
| 650 Industries, Inc. (Expo) | Push notifications to the mobile app (delivered through Apple and Google push services) | Device push tokens and notification text | United States |
| Visual Crossing Corporation | Weather forecasts for scheduled job sites | Job-site coordinates and dates | United States |
| U.S. Census Bureau Geocoder | Looking up the county for a building permit check | The project address | United States |
3. Services you connect with your own account
These are your accounts with other companies. Nothing is sent to them unless you connect them, and your own agreement with that company applies alongside ours. You can disconnect them at any time from Settings.
| Vendor | What we use it for | Personal data it receives | Location |
|---|---|---|---|
| Intuit Inc. (QuickBooks Online) | Accounting sync, when you connect your QuickBooks company | Customers, vendors, items, estimates, invoices, payments, bills | United States |
| SmartBuild (Post Frame Solver) | Reading your estimating jobs, when you connect your SmartBuild account | Job specifications, material lists, customer names on jobs | United States |
| Microsoft Corporation (Outlook calendar) | Calendar sync, when you connect an Outlook calendar | Calendar events | United States |
| Google LLC (Google Calendar) | Calendar sync, when you connect a Google calendar | Calendar events | United States |
| Meta Platforms, Inc. (lead ads) | Receiving leads from your Facebook and Instagram lead forms, when you connect your page | The details a person submits on your lead form | United States |
4. Speech recognition in your browser
Calls placed inside the platform’s chat are transcribed using the speech recognition built into each participant’s web browser, as our Terms of Service describe. That service is provided by the browser’s maker under the browser’s own terms — in Google Chrome, for example, speech is sent to Google for recognition. It is not a vendor we contract with, so it is listed here separately.
How we handle personal information is set out in our Privacy Policy.