Legal

Subprocessors

Effective May 27, 2026

Fire Tools uses the following service providers (“subprocessors”) to operate the Service. Each subprocessor is contractually bound to handle user data only as needed to provide their service to us, under their respective Data Processing Agreements.

Supabase

Data handled.
Account information (email, hashed password, profile fields), portfolios, holdings, settings.
Purpose.
Primary database and authentication provider. Stores all user-scoped application data.
Resources.
Privacy Policy · DPA

Vercel

Data handled.
IP addresses, request logs, deployment analytics.
Purpose.
Application hosting, edge runtime, and performance analytics.
Resources.
Privacy Policy · DPA

Stripe

Data handled.
Payment methods, billing addresses, transaction records, subscription history.
Purpose.
Payment processing for Founder Edition deposits, subscriptions, and refunds.
Resources.
Privacy Policy · DPA

Resend

Data handled.
Recipient email addresses, message content, delivery and engagement events.
Purpose.
Transactional and marketing email delivery.
Resources.
Privacy Policy · DPA

Plaid

Data handled.
Investment holdings, account metadata, and brokerage credentials you provide when linking an account. Used only when you choose to connect a brokerage.
Purpose.
Brokerage account connections for automatic portfolio sync.

Yahoo Finance

Data handled.
Does not process user-identifying data. Listed for transparency.
Purpose.
Market data source for prices, dividends, and security metadata.
Resources.
Privacy Policy

We notify users via email or in-product notice when we add new subprocessors that process significant categories of personal data. To object, contact info@fire-tools.com before the change takes effect.