Data Privacy

Third-Party Subprocessors

To deliver our services, PaperWorking engages third-party service providers (“subprocessors”) that may access or process customer data on our behalf. Each subprocessor has been reviewed for security and privacy compliance in accordance with GDPR Article 28.

Last updated: June 29, 2026 · 11 subprocessors

Infrastructure & Platform

Entity NamePurposeData RegionPrivacy Policy
Google Cloud Platform (Firebase)Cloud hosting, authentication (Firebase Auth), document database (Firestore), file storage (Cloud Storage), and serverless functions.United States (us-central1)View Policy →
Google Places APIAddress autocomplete and geocoding for property search during project creation and acquisition workflows.United StatesView Policy →

Payments & Billing

Entity NamePurposeData RegionPrivacy Policy
Stripe, Inc.Payment processing, subscription billing, card validation, customer billing portals, and revenue ledger storage.United StatesView Policy →

Communications & Signatures

Entity NamePurposeData RegionPrivacy Policy
Twilio SendGrid, Inc.Transactional system email delivery, email verification, delivery event tracking, and automated notification dispatches.United StatesView Policy →
DocuSign, Inc.Electronic signature workflows for Letters of Intent (LOI), purchase agreements, and closing documents. Document envelope creation and status tracking.United StatesView Policy →
Intercom, Inc. / Crisp IM SASIn-app customer support chat widget, helpdesk messaging, and support ticket management.United States / EuropeView Policy →

Property Data Providers

Entity NamePurposeData RegionPrivacy Policy
RentCast, Inc.Property valuation estimates (AVM), rent estimates, comparable sales and rental data, and zip-level market statistics for investment analysis.United StatesView Policy →
Bridge Interactive (Constellation1)MLS listing data feeds including active listings, agent information, open house schedules, and property detail records for acquisition research.United StatesView Policy →

Observability & Monitoring

Entity NamePurposeData RegionPrivacy Policy
PostHog, Inc.Product analytics, feature flag management, A/B test rollouts, and anonymized usage telemetry for product improvement.United StatesView Policy →
Sentry (Functional Software, Inc.)Application error capture, client-side crash diagnostics, API route performance monitoring, and release health tracking.United StatesView Policy →
Better Stack, Inc.Infrastructure uptime monitoring, incident alerting, public status page feeds, and on-call escalation.United States / EuropeView Policy →

This list is maintained in version control and updated whenever a vendor is added or removed. Questions? Contact privacy@paperworking.co.