Back to Home

Subprocessors

Last updated: December 27, 2025

This page lists the third-party subprocessors that Agricultable engages to process personal data on behalf of our users. We carefully select subprocessors that maintain high security and privacy standards, and we require them to comply with applicable data protection regulations including GDPR.

What is a Subprocessor?

A subprocessor is a third-party service provider that processes personal data on behalf of Agricultable. When you use our platform, your data may be processed by these subprocessors to provide essential services such as database hosting, payment processing, and mapping functionality.

Current Subprocessors

The following is a complete list of subprocessors currently engaged by Agricultable:

Supabase, Inc.

Infrastructure
Purpose:Database hosting, user authentication, and file storage
Data Processed:User accounts, farm profiles, product listings, orders, images, and all platform data
Location:United States
Website:supabase.com
Privacy Policy:supabase.com/privacy
Security:SOC 2 Type II certified, GDPR compliant, data encrypted at rest and in transit

Stripe, Inc.

Payments
Purpose:Payment processing, farmer payouts, and fraud prevention via Stripe Connect
Data Processed:Payment card details, billing addresses, transaction history, and payout information for farmers
Location:United States (with global processing capabilities)
Website:stripe.com
Privacy Policy:stripe.com/privacy
Security:PCI DSS Level 1 certified, SOC 1 and SOC 2 compliant, GDPR compliant

OpenStreetMap Foundation

Mapping
Purpose:Map tiles, geocoding (address lookup), and location-based farm discovery
Data Processed:Farm addresses, customer search locations, and IP addresses for map requests
Location:United Kingdom (Foundation), distributed global infrastructure
Privacy Policy:OSM Privacy Policy
Service:Nominatim geocoding API and OpenStreetMap tile servers

Data Processing Agreements

We have entered into data processing agreements (DPAs) with each of our subprocessors that include:

  • Obligations to process data only on our documented instructions
  • Requirements to implement appropriate security measures
  • Restrictions on engaging additional subprocessors without notice
  • Obligations to assist with data subject rights requests
  • Requirements for data deletion upon termination of services
  • Standard Contractual Clauses (SCCs) for international transfers where required

International Data Transfers

Some of our subprocessors are located outside the European Economic Area (EEA). For these transfers, we ensure appropriate safeguards are in place:

  • Supabase: EU-US Data Privacy Framework certified, Standard Contractual Clauses
  • Stripe: EU-US Data Privacy Framework certified, Standard Contractual Clauses, Binding Corporate Rules
  • OpenStreetMap: UK-based foundation with GDPR compliance

Changes to Subprocessors

We may update this list when we engage new subprocessors or discontinue existing ones. We will notify users of material changes through:

  • Updates to this page with a new "Last updated" date
  • Email notification to registered users for significant changes
  • In-app notifications when required by applicable law

If you object to a new subprocessor, please contact us within 30 days of the notification. We will work with you to address your concerns or provide alternative arrangements where feasible.

Your Rights

Under GDPR and other applicable data protection laws, you have rights regarding your personal data processed by our subprocessors. These include:

  • Right to Access: Request information about which subprocessors process your data
  • Right to Rectification: Correct inaccurate data held by subprocessors
  • Right to Erasure: Request deletion of your data from our systems and subprocessors
  • Right to Object: Object to certain processing activities
  • Right to Data Portability: Receive your data in a portable format

To exercise these rights, please contact us at privacy@agricultable.com

Contact Us

If you have questions about our subprocessors or how your data is processed, please contact:

Agricultable, Inc.

Data Protection Officer

123 Farm Road, Louisville, KY 40202

Email: privacy@agricultable.com

Phone: (555) 123-4567