Service Providers & Advertising Partners
Service Providers & Advertising Partners
Last Updated: October 1, 2026
Service providers
PlanStan works with the service providers below to operate the Services. Each acts on our behalf and receives only the information it needs for its stated purpose.
| Sub-processor | Purpose | Information received | Location |
|---|---|---|---|
| Vercel | Application hosting, content delivery, and site analytics | Request metadata, IP address, pages requested, aggregate page-view and performance metrics (cookieless) | United States |
| Supabase | Database and document storage | Account information, health profile information, uploaded plan documents | United States |
| Clerk | Account authentication | Name, email address, authentication credentials | United States |
| Stripe | Subscription and payment processing | Name, email address, billing information. PlanStan does not receive or store full payment card numbers. | United States |
| Google Cloud (Vertex AI) | AI processing of uploaded plan documents | Content of the insurance documents you upload | United States |
| PostHog | Product analytics — understanding how people find and use the Services | Device identifier (cookie), account identifier once you sign in, pages viewed and features used, referral and campaign information, device and browser information, IP address and approximate location. Before you sign in, collected only if you opt in to analytics cookies. No name, email address, or health information. | United States |
| Sentry | Error monitoring and diagnostics | Error diagnostics and request metadata. Session recordings are captured only when an error occurs, with all text and input values masked. | United States |
| Upstash | Rate limiting and caching | Request metadata, account identifier | United States |
We update this page when our sub-processors change. Material changes are also notified under Section 10 of our Privacy Policy.
Advertising partners
The companies below are not sub-processors: they do not act on our behalf. They receive data only if you opt in to advertising cookies (via the cookie banner, Your Privacy Choices, or the Cookies section of your account settings), and they may also use it for their own advertising purposes, as described in their own privacy policies. If you never opt in, or you turn advertising cookies off, they receive nothing.
| Advertising partner | Purpose | Information received | Location |
|---|---|---|---|
| Meta (Facebook/Instagram) | Advertising measurement and audience building — only if you opt in to advertising cookies | Online/device identifiers and two generic events: account created (from our marketing/sign-up pages) and subscription purchased (sent by our servers when a purchase completes). Tracking technologies load only on our marketing pages and sign-up flow. No health, family, or plan information; no customer list upload. | United States |
| Google Ads | Advertising measurement and audience building — only if you opt in to advertising cookies | Online/device identifiers and two generic events: account created (from our marketing/sign-up pages) and subscription purchased (sent by our servers when a purchase completes). Tracking technologies load only on our marketing pages and sign-up flow. No health, family, or plan information; no customer list upload. | United States |
| TikTok | Advertising measurement and audience building — only if you opt in to advertising cookies | Online/device identifiers and two generic events: account created (from our marketing/sign-up pages) and subscription purchased (sent by our servers when a purchase completes). Tracking technologies load only on our marketing pages and sign-up flow. No health, family, or plan information; no customer list upload. | United States |