Back to Privacy Notice

Workbench service providers

These providers support the core service and the conditional features described below. Data sent depends on the feature you use and the permissions you give. The Privacy Notice and any applicable participation terms explain HardwareHub’s obligations.

Provider list reconciled 2026-10-10. Optional analytics requires separate permission. AI processing is currently disabled.

Supabase

Account authentication, database and private file storage

Data: Account details, authorized project content, files and operational records.

Use: Core service.

Supabase privacy information

Vercel

Application hosting and delivery

Data: Requests, bounded application payloads in transit and operational logs.

Use: Core service.

Vercel privacy information

Stripe

Paid checkout, subscriptions and billing management

Data: Billing contact, payment details supplied directly to Stripe, subscription and transaction identifiers.

Use: When billing features are used.

Stripe privacy information

Resend

Authentication and invitation email delivery

Data: Email address, bounded authentication/invitation messages and delivery metadata.

Use: Configured email delivery.

Resend privacy information

Cloudflare Turnstile

Authentication abuse prevention

Data: Challenge tokens and network/device signals.

Use: When the authentication challenge is enabled.

Cloudflare Turnstile privacy information

Google Identity Services

Optional Google sign-in

Data: Identity assertion, verified email and supplied profile details.

Use: When you choose Google sign-in.

Google Identity Services privacy information

PostHog

Optional usage analytics

Data: Allowlisted usage events and associated technical metadata; no project content or session replay.

Use: Only with separate analytics permission.

PostHog privacy information

SignWell

Project NDA signing when enabled and expressly initiated

Data: The selected NDA PDF, signer names/email addresses, signing and audit records.

Use: Only when signing is enabled and you initiate the workflow.

SignWell privacy information

Provider locations and retention depend on the service and configuration; this list does not promise a particular residency or automatic deletion of provider records. HardwareHub’s retention and verified-request process is described in the Privacy Notice. Contact privacy@hardwarehub.io with provider or privacy questions.