Last updated: 16 August 2026
Subprocessors
BuildTrack uses the providers below to operate the Service. They process data only to provide their infrastructure or feature to us, on our instructions. They are not permitted to use Customer Data for their own marketing, advertising, resale or model training. See our Data Processing Addendum and Privacy Policy.
Locations are typical regions those providers operate in. They are not a promise that all data stays in Malaysia. We will update this page when we add or replace a material subprocessor. Questions: hello@buildtrack.com.my.
| Provider | Role | Typical location | Data involved |
|---|---|---|---|
| Vercel, Inc. | Application hosting and delivery | United States and global edge | Application traffic, logs, and the Customer Data needed to render the Service |
| Neon, Inc. | PostgreSQL database | Provider cloud region (United States unless otherwise configured) | Customer Data and account records stored in the Service |
| Amazon Web Services, Inc. | Object storage (S3) for files and media | Singapore (ap-southeast-1) by default | Uploaded files, photos, documents and generated PDFs |
| Upstash, Inc. | Redis cache and rate limiting | Provider cloud region | Short-lived operational keys and cache entries (not a system of record) |
| Stripe, Inc. | BuildTrack subscription billing | United States and global | Billing contact details and payment-method tokens; we do not store full card numbers |
| CHIP (Chip-in Sdn Bhd) | Optional customer payment collection (per workspace) | Malaysia | Invoice payment details the customer’s payers submit through CHIP |
| Resend, Inc. | Transactional email delivery | United States | Email addresses and message content we send (invites, receipts, quotations, notices) |
| Google LLC | AI inference for optional parse and write-assist features | Global / United States | Documents and text the user (or a connected WhatsApp flow) submits for suggestions |
| Google LLC | Sign-in, Calendar sync and Maps lookups | Global / United States | Account email for Google sign-in; calendar events the user chooses to push; map/address lookups |
| Google LLC | Analytics and advertising on the marketing site | United States / global | Marketing-site visits and conversion events (not authenticated product Customer Data) |
| Meta Platforms, Inc. | Advertising pixel on the marketing site | United States / global | Marketing-site visits and conversion events (not authenticated product Customer Data) |
| Meta Platforms, Inc. | WhatsApp Cloud API (platform invites and optional customer WABA) | Global / United States | Phone numbers and message content when WhatsApp is used or a workspace connects its own WABA |
| Functional Software, Inc. (Sentry) | Mobile application error monitoring | United States / European Union | Crash and diagnostic data from the mobile app (not used to rebuild customer commercial records) |
| Microsoft Corporation | Clarity session analytics on the marketing site | United States / global | Marketing-site page interactions and session replay (not the authenticated product app) |