Sub-Processors
Effective Date: May 2, 2026
Last Updated: May 2, 2026
A "Sub-Processor" is a third party that FasterQuotes engages to process Customer Data on our behalf. This page lists every Sub-Processor we use, along with the service it provides, the categories of data it processes, and its operating location.
FasterQuotes commits to providing at least 30 days' prior notice before adding or replacing any Sub-Processor. Notice is given by updating this page; Customers can also subscribe to direct email notice. To subscribe, email privacy@fasterquotes.io with the subject line "Subscribe: Sub-Processor Changes".
Current Sub-Processors
| Sub-Processor | Service | Data Processed | Location |
|---|---|---|---|
| Google LLC | Gmail API access via OAuth restricted scope gmail.readonly | RFQ email content (headers, body, attachments) from Customer-authorized mailboxes | United States |
| Google LLC | Gemini API (paid tier) for AI extraction | RFQ email content sent for extraction. Not used for training under Google's Gemini API paid-tier terms. | United States |
| Sinch (Mailgun) | Inbound email routing for Customer-configured Forwarding Addresses | RFQ email content sent to submit-{token}@ingest.fasterquotes.io | United States |
| Supabase, Inc. | Postgres database, Authentication, Realtime | All Customer Data at rest, including extracted structured data and account records | United States (us-east-1 / us-west-1) |
| Railway Corporation | Backend application hosting | Application data in transit and runtime memory; structured logs | United States |
| Vercel, Inc. | Frontend application hosting and edge delivery | Static assets; serverless function logs; user IP and basic request metadata | United States (global edge with US origin) |
| Google LLC | Google Analytics | Aggregated website traffic metrics; no Customer Data | United States |
Marketing Sub-Processors
FasterQuotes does not currently use a marketing automation Sub-Processor. Product-related transactional email (account confirmations, security alerts, breach notifications) is sent directly from siddharth@fasterquotes.io via Google Workspace.
Jurisdiction and International Transfers
All current Sub-Processors operate primarily in the United States. Where FasterQuotes processes Personal Data subject to the GDPR or UK GDPR, international transfers rely on the EU Standard Contractual Clauses (Module 2: Controller-to-Processor) and, for UK Personal Data, the UK International Data Transfer Addendum. See our Data Processing Addendum.
Contact
Questions about Sub-Processors: privacy@fasterquotes.io.
Last updated: May 2, 2026