Legal

Subprocessor List

Last updated: September 8, 2026

Providers that may process customer information while operating Cemstree.

Status: Founder-approved inventory — provider contracts and regions remain subject to verification.

Active platform providers

  • Supabase: database, authentication, private storage, realtime, backups, and related infrastructure.
  • Vercel Inc.: application hosting, server execution, content delivery, and operational logs.
  • Google: user-selected Google authentication.
  • Stripe, LLC: Cemstree subscriptions and customer-selected payment processing for church giving.
  • Plus Five Five, Inc. (Resend): transactional and customer-authorized email delivery.

Conditional provider

Text In Church is a customer-selected SMS integration and is treated as active only for a church that configures and activates it. First-party push notifications are planned but not currently represented as an active service.

Change notice

Cemstree targets 14 calendar days of advance notice before a new material subprocessor begins processing Customer Personal Data when practical. Emergency replacements needed to protect security or availability may receive shorter notice with an explanation.

Contact

Privacy, legal, accessibility, billing, and support requests may be sent to support@cemstree.com. Security vulnerabilities, suspected unauthorized access, and abuse reports should be sent to security@cemstree.com.

Terms · Privacy · DPA · Subprocessors · Security · Acceptable use · Subscriptions · Support