Subprocessors
Last updated: April 18, 2026
QuickFlip Recon uses the third-party service providers listed below to operate the Service. Each is bound by their own privacy and security commitments, linked at the end of their row.
We review this list whenever we add or change a subprocessor. If you need formal written notification of material changes (e.g. for your own compliance needs), email privacy@quickfliprecon.com and we'll add you to the notification list.
| Provider | Purpose | Location | Data shared |
|---|---|---|---|
| Supabase | Postgres database, authentication, file storage | United States (AWS us-east-1) | Customer account info, dealership data, inventory records, photos, documents, recon records |
| Vercel | Web hosting and serverless compute | United States (various regions) | Request logs, IP addresses, browser user agent. No persistent customer data. |
| Stripe | Payment processing and subscription billing | United States; Canadian entity for CAD transactions | Billing email, company name, subscription details, payment method (stored by Stripe, not us) |
| Resend | Transactional email (invites, password resets, billing notices) | United States | Recipient email address, email content |
| Upstash | Rate limiting on public forms (contact a dealer, trade-in appraisal, short-URL redirects, auth endpoints) to block abuse and spam | United States (us-east-1) | Visitor IP address (hashed bucketing key), request timestamps. No user account data, no form contents. |
| GoDaddy | Domain name registrar | United States | Domain ownership information. No customer data is sent to GoDaddy. |
Questions?
For details about how any of these providers handle your data, click the provider name above to read their own privacy policy. For QuickFlip Recon specific questions, email privacy@quickfliprecon.com.