beta
Join the public beta Free 2 week trialThen $16/mo · Cancel anytime Join Playhead
Legal

Subprocessors

Last updated October 13, 2026

Playhead uses the third-party service providers below to operate the Services. Each one processes personal information only as needed to perform its function on our behalf, and is bound to handle it consistently with our Privacy Policy.

All of the providers listed here process data in the United States. We may update this list as our providers change.

Current subprocessors

Supabase Database hosting. Account, authentication, usage, conversation, treatment, support, Community, and internal analytics records.
PostHog Product analytics. Account identifiers, device and application information, and usage events that help us understand how people use Playhead.
Customer.io Customer messaging and engagement. Contact details, account and usage information, communication preferences, and message delivery and engagement data used to send and personalize customer communications.
Fly.io Application hosting. Requests to the Playhead API and to this website.
Tigris Object storage. Audio you submit with a problem report or share, profile images, and Community message attachments.
Cloudflare Backup storage. Backup copies of databases, stored files, and operational exports.
Resend Transactional email. Your email address and the contents of messages we send you.
Airtable Website forms and access administration. Email addresses, form and source details, and internal customer relationship records.
Slack Internal support and member operations. Names, email addresses, membership events (including the approximate city and country an account was created from), and limited messages sent to the Playhead team.
MaxMind IP geolocation. The IP address an account is created from, looked up once at signup to find its approximate city and country for an internal new-member alert.
Stripe Payment processing. Billing details and payment status. Playhead does not store full card numbers.
Sentry Error and performance monitoring. Diagnostic data when something fails, including the request context around it.
OpenAI AI processing. Messages you send to the assistant and the context needed to answer them.
Anthropic AI processing. Messages you send to the assistant and the context needed to answer them; limited support and team messages may also be classified to help route a response.
Google Authentication. Your identity when you choose to sign in with Google.
Google Optional website analytics. How this website is used, via Google Tag Manager and Google Analytics, only after you accept analytics. Not used in the Playhead desktop application.
Contentsquare Optional website analytics. How visitors navigate and interact with this website — page views, clicks, and session behavior — only after you accept analytics. Not used in the Playhead desktop application.
Meta Optional marketing and advertising measurement. How visitors arrive at this website from Meta ads, via the Meta Pixel, only after you accept Marketing. Not used in the Playhead desktop application.
Dub Optional affiliate attribution. Whether a visitor arrived through a referral link from a Playhead partner, recorded only after you accept Marketing; for an account created that way, an account identifier and its subscription payment amounts, so the partner can be credited. Not used in the Playhead desktop application.
Google Web font delivery. Browser request information, including IP address, when pages using Google-hosted fonts are loaded.

Questions

If you have a question about this list, contact us at contact@playhead.fm.