Last updated: 1 November 2026
BeCleva ApS does not sell your data. The page is called subprocessors because that is the word most people look for. A supplier we contract with ourselves is our processor. That supplier’s own suppliers are its subprocessors. Parties that decide the purpose themselves are in the second table.
They process data on our instructions, where GDPR Article 28 requires a data processing agreement.
| Party | Purpose | Data | Location |
|---|---|---|---|
| Supabase | Database, sign-in, edge functions and file storage | Account, budget, receipts, bank data we store, sessions | EU/EEA |
| Vercel | Hosting the web app. Visit statistics only with consent | IP address and request logs. Analytics only if you say yes | EU/EEA and the USA |
| Stripe | Plus subscription status stored with us | Customer and subscription ids. Not the full card number on our servers | EU/EEA and the USA |
| Resend | Email from us | Email address and the message content | USA |
| OpenAI | AI features you start yourself | Text excerpts, amounts and receipt images for that feature | USA |
| Trigger.dev | Background jobs, including sync and categorisation | Job data, necessary user and bank data, technical logs | EU/EEA and third countries |
| Upstash | Short-lived cache and rate limiting | Technical keys, IP address and operations data | EU/EEA and the USA |
| Functional Software (Sentry) | Errors and performance, only with statistics consent | Errors, stack traces and technical device data | USA, unless the project runs in an EU region |
| Usercentrics (Cookiebot) | Consent log and cookie declaration on the web | Your cookie choice and a technical id | EU/EEA |
| Google (Firebase Cloud Messaging) | Push on Android while you are signed in | Device token | EU/EEA and the USA |
| Cloudflare (Turnstile) | Bot check on sign-up and feedback | A technical proof and IP address. Not your budget | EU/EEA and the USA |
They do not simply follow an instruction from us. Their own policy applies to the part they control.
| Party | Purpose | Data | Location |
|---|---|---|---|
| Subaio ApS (CVR 37766585) | Account information service when you connect a bank | The accounts and postings you approve at your bank. Not MitID or your bank code | Denmark |
| Sign in with Google | Identity at sign-in | EU/EEA and the USA | |
| Apple | Sign in with Apple | Identity at sign-in | EU/EEA and the USA |
| Stripe | The card payment itself | Card details you enter at Stripe | EU/EEA and the USA |
| Vipps MobilePay | Plus via MobilePay, if you choose that path | Agreement id and payment status | EU/EEA |
Which of these parties set something in the browser, and how you change the choice, is in the cookie policy.
We update this page when a supplier is added, removed, or given a different role. If the change matters for information you have already received, we update the privacy policy as well.
Email support@becleva.com if you want the specific transfer safeguard for a supplier. For transfers outside the EU/EEA we use the EU Commission’s standard contractual clauses or another approved mechanism when required.