Subprocessors
Last updated: August 19, 2026
Frelo uses the services below to operate. Each one is bound by contract to use your data only to provide its service to Frelo. We do not sell data, and we do not share it with advertisers or data brokers.
| Provider | What it does | Data involved | Location |
|---|---|---|---|
| Stripe, Inc. | Payment processing — subscription billing and client invoice payments | Name, email, billing address, payment method (held by Stripe, never by Frelo) | United States |
| Neon, Inc. | Database hosting — the primary application database | All workspace content: clients, projects, invoices, time entries, expenses, contracts | United States |
| Cloudflare, Inc. | File storage (R2) — uploads, receipts, logos, signed contract snapshots | Files you and your clients upload | United States |
| Resend (Plus Five Five, Inc.) | Transactional email — invoices, reminders, notifications, account mail | Recipient name and email address, message content | United States |
| Vercel, Inc. | Application hosting and delivery | Request metadata including IP address; workspace content in transit | United States |
| Upstash, Inc. | Rate limiting | IP addresses and hashed request keys, held briefly | United States |
| Trigger.dev | Background jobs — recurring expenses | Workspace and expense identifiers | United States |
Changes to this list
We will update this page before a new subprocessor starts handling customer data, and we will email account holders at least 30 days in advance. If you object to a new subprocessor, reply to that email — we will either work around it or help you export your data and close your account.
Data processing agreements
If you store your own clients' personal data in Frelo, you are the data controller and Frelo is your processor. If you need a signed data processing agreement — because you are in the EU or UK, or because your own client asks for one — email privacy@frelo.app and we will send one.
See also our Privacy Policy and Terms of Service.