Wording of 2026-10-23
Subprocessors, the providers that run ClaraDB.
The providers The Plain Works Co., Ltd. uses to run ClaraDB.
1. Processors
They process personal data on our instructions. A provider receives data only when the feature that uses it is in use.
Provider
Purpose
Typical data
Location
Vercel Inc.
Hosting and delivery of the website, workspace and API
Requests, IP address, technical logs
United States; delivery through Vercel's global network
Cloudflare, Inc.
DNS for claradb.com
DNS queries
Global network; processing may occur in any country where Cloudflare operates
Supabase Pte. Ltd.
Database and sign-in
Everything in your account and workspace, IP addresses in request logs
Project region: us-east-1 (Amazon Web Services, N. Virginia, United States)
PostHog, Inc.
Product analytics, error reports, sampled session replay
Analytics events, with the IP address processed for approximate location. Loaded only after consent in the EU, EEA, UK and Switzerland. No replay in the signed-in app or on sign-in pages
United States
Plus Five Five, Inc. (Resend)
Sending email
Recipient address, message content
United States
- Vercel Inc.
- Purpose
- Hosting and delivery of the website, workspace and API
- Typical data
- Requests, IP address, technical logs
- Location
- United States; delivery through Vercel's global network
- Cloudflare, Inc.
- Purpose
- DNS for claradb.com
- Typical data
- DNS queries
- Location
- Global network; processing may occur in any country where Cloudflare operates
- Supabase Pte. Ltd.
- Purpose
- Database and sign-in
- Typical data
- Everything in your account and workspace, IP addresses in request logs
- Location
- Project region: us-east-1 (Amazon Web Services, N. Virginia, United States)
- PostHog, Inc.
- Purpose
- Product analytics, error reports, sampled session replay
- Typical data
- Analytics events, with the IP address processed for approximate location. Loaded only after consent in the EU, EEA, UK and Switzerland. No replay in the signed-in app or on sign-in pages
- Location
- United States
- Plus Five Five, Inc. (Resend)
- Purpose
- Sending email
- Typical data
- Recipient address, message content
- Location
- United States
2. Independent controller
Provider
Purpose
Role
Paddle.com Market Limited and its affiliates
Merchant of record for paid plans: checkout, payment, tax, invoices, refunds
Seller (merchant of record) and independent controller of transaction data. We receive a customer id, plan and subscription status.
- Paddle.com Market Limited and its affiliates
- Purpose
- Merchant of record for paid plans: checkout, payment, tax, invoices, refunds
- Role
- Seller (merchant of record) and independent controller of transaction data. We receive a customer id, plan and subscription status.
3. Changes and objections
- We give at least 30 days' notice, by email to workspace owners and in the change log on this page, before a new or replacement subprocessor starts processing customer personal data. Where a replacement is urgent for security, legal or availability reasons, we give notice as soon as we reasonably can.
- A customer with a data processing agreement may object on reasonable data-protection grounds within 14 days by writing to hello@claradb.com. See the data processing agreement for what happens next.
4. Change log
Date
Change
2026-10-15
No provider changed. Team and Business are now sold through Paddle as merchant of record, an independent controller, not a subprocessor.
2026-10-14
No provider changed. The data processing agreement now lists these subprocessors in section 5 and states how notice is given: by email to workspace owners and in this change log.
2026-10-11
Contracting entities corrected to the names in the providers' published terms: Supabase Pte. Ltd. and Plus Five Five, Inc. (Resend).
2026-10-11
Cloudflare is used for DNS only; it no longer processes any form or sign-in request.
2026-10-11
Hosting moved to Vercel (United States); Cloudflare remains for DNS; Supabase region stated (us-east-1, United States).
2026-10-09
First version: Cloudflare, Supabase, PostHog and Resend as processors; Paddle as independent controller for paid plans.
- 2026-10-15
- Change
- No provider changed. Team and Business are now sold through Paddle as merchant of record, an independent controller, not a subprocessor.
- 2026-10-14
- Change
- No provider changed. The data processing agreement now lists these subprocessors in section 5 and states how notice is given: by email to workspace owners and in this change log.
- 2026-10-11
- Change
- Contracting entities corrected to the names in the providers' published terms: Supabase Pte. Ltd. and Plus Five Five, Inc. (Resend).
- 2026-10-11
- Change
- Cloudflare is used for DNS only; it no longer processes any form or sign-in request.
- 2026-10-11
- Change
- Hosting moved to Vercel (United States); Cloudflare remains for DNS; Supabase region stated (us-east-1, United States).
- 2026-10-09
- Change
- First version: Cloudflare, Supabase, PostHog and Resend as processors; Paddle as independent controller for paid plans.
Questions and notice requests: hello@claradb.com.