Sub-processors
Last update:
Ask AI to explain
Get a quick, plain-language summary of this page without all the jargon.
1. Introduction
Sub-processors are the companies that handle personal information on our behalf to run Tally. This page lists them, and the services you can connect yourself.
We'll update this page, and email account holders, before adding a provider that will handle your clients' information.
How we handle personal information is set out in our Privacy Policy.
2. List of sub-processors
| Provider | What it does for Tally | Personal information it handles | Where | Data processing terms / privacy |
|---|---|---|---|---|
| Supabase | Database, sign-in and file storage | Everything stored in Tally: account and sign-in details, business profile, clients, financial records, bank data, receipts and documents, encrypted keys, session and activity records | Australia (Sydney) | DPA, privacy |
| Vercel | Hosting the website and server code, scheduled jobs, custom pay domains; works out the approximate place of each session from its internet address | All data passing through Tally's servers; internet addresses; custom pay domain names | United States and worldwide edge network | DPA, privacy |
| Vercel Web Analytics | Counting page views, without cookies | Page address, referrer, country, device and browser type | United States and other countries where Vercel operates | As above |
| Resend | Sending Tally's emails (sign-in codes and links, invoices, quotes, receipts and reminders sent from Tally's shared address, Tally Pro billing emails) and receiving receipts forwarded to Tally receipt addresses | Email addresses and names of users and their clients; email content and attachments; delivery status | United States and other countries where Resend operates | DPA, privacy |
| Stripe (Tally's own account) | Tally Pro billing | Name, email, Stripe customer and subscription IDs, card details (held by Stripe; Tally sees only brand and last four digits), payment history | United States and other countries where Stripe operates | DPA, privacy |
| Google (Google Cloud: Places API and Cloud Vision API) | Address suggestions as you type a business address; reading the text on receipts you scan | Address text you type; receipt images and PDFs (first page) you choose to scan | United States and other countries where Google operates | Cloud Data Processing Addendum, privacy |
| Google (Sign in with Google, through Supabase) | Signing you in, if you choose Google | Name, email address, Google account ID | United States and other countries where Google operates | privacy |
| Apple (Sign in with Apple, Apple Push Notification service) | Signing you in, if you choose Apple; delivering notifications to your iPhone or Mac | Name and email address (or private relay address), Apple account ID; device push tokens; notification content | United States | privacy |
| logo.dev | Showing company logos next to clients, merchants and transactions | Company website domains and names. Requests go from your browser or device straight to logo.dev, so it also sees your internet address | United States | DPA, privacy |
3. Services you connect
These work for you, not for us. They handle data under your own agreement with them. They are not Tally's sub-processors, but Tally exchanges data with them when you connect them.
| Service | What happens | Where | Terms / privacy |
|---|---|---|---|
| Your Stripe account | You give Tally a key. Tally creates a webhook, creates customers and payment pages for your invoices, and receives payment updates. Client card payments go to your Stripe account. | Per your Stripe account | Stripe legal |
| Your Redbark account (bank feed, under the Consumer Data Right) | You give Tally your Redbark API key, and consent to share bank data on Redbark's site. Redbark sends Tally the transactions and balances you consented to share. Redbark says it connects to banks through Fiskil, an accredited data recipient. | See Redbark's privacy policy | Redbark CDR page, privacy |
| Your Resend account or sending domain (optional) | If you set one up, Tally sends your emails through it instead of Tally's shared address. | Per your Resend account | As for Resend above |
| Anthropic (Claude, optional) | If you connect Claude, it reads your Tally data, and with write access changes it, at your request. | United States | privacy, and your own agreement with Anthropic |
4. Not a data flow
- Hnry. Tally doesn't connect to Hnry. You type in figures from your Hnry statements.
- On-device Apple Intelligence. Runs on your device. Nothing is sent to Tally or Apple for these features.