Last updated: July 2026
We use a small number of third-party providers to run API Direct. This page lists the infrastructure providers that may process personal data on our behalf, and what each one is used for.
This list forms part of our Data Processing Agreement. If you are a customer and want to be told when this list changes, email support@apidirect.io and we will add you to the notification list.
| Provider | Purpose | Data processed |
|---|---|---|
| Supabase | Database and authentication | Account data, API keys (hashed), usage and billing records |
| Vercel | Application hosting, scheduled jobs, and website analytics | Request metadata, including IP addresses in infrastructure logs, and website page-view events |
| Upstash | Caching and rate limiting | Usage counters, rate-limit counters, short-lived technical identifier mappings |
| Stripe | Payment processing | Billing and payment information |
| Amazon Web Services (SES) | Transactional email delivery | Email address, name |
| Mixpanel | Product analytics | Email address, account milestone and usage events |
| OpenRouter | Optional AI text analysis (sentiment), only when a customer requests it | The text of the public content being analysed for that request |
| Optional sign-in with Google; web font delivery | Email and name (only if you choose Google sign-in); IP address and browser details of website visitors, via fonts loaded on each page | |
| jsDelivr | Content delivery for a website script | IP address and browser details of website visitors |
This page lists the providers that host and operate our service. It does not describe where the public content we return comes from. That content is drawn from public social platforms and the public web, as described in our Privacy Notice for Individuals.
Some of the providers above process data outside the United Kingdom. Where personal data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or on UK adequacy where it applies.
We will update this page when we add or replace a sub-processor. Customers on the notification list will be told in advance, so that they have the opportunity to object as set out in our Data Processing Agreement.
Email: support@apidirect.io