Sub-processors
Last updated October 29, 2026
Done is operated by Pickleland LLC. These are the service providers we use to run Done that process personal data on our behalf, including data we process for business customers under our Data Processing Agreement. Each is bound by a written agreement with data-protection terms at least as protective as that agreement, and transfers of personal data from the EEA, the UK or Switzerland to them rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard.
Current sub-processors
Cloudflare, Inc.
- Purpose
- Hosting and compute (Workers), the database (D1), file storage (R2), inbound email for email-to-task addresses, the sign-up bot check (Turnstile) and cookieless page-view counts (Web Analytics).
- Data
- All customer data stored in Done.
- Location
- United States (stored data). Requests are handled at Cloudflare's data centre nearest the user.
- Privacy
- https://www.cloudflare.com/privacypolicy/
Resend, Inc.
- Purpose
- Sending email: password resets, email verification, workspace invitations, the daily digest, approval alerts and plan notices.
- Data
- Recipient email address and the message, which for the digest and alerts includes task titles.
- Location
- United States
- Privacy
- https://resend.com/legal/privacy-policy
Stripe, Inc.
- Purpose
- Billing for paid plans.
- Data
- Name, email address, billing details and subscription status. Card details go to Stripe directly and never reach Done.
- Location
- United States
- Privacy
- https://stripe.com/privacy
Google LLC
- Purpose
- Google Analytics on trydone.app, only where the visitor allows it (see the Privacy Policy); Firebase Cloud Messaging to deliver notifications to the Android app.
- Data
- Pages visited, browser and device type, approximate location; for notifications, a device token, a short generic message and a task ID.
- Location
- United States
- Privacy
- https://policies.google.com/privacy
Apple Inc.
- Purpose
- Apple Push Notification service, to deliver notifications to the iOS app.
- Data
- A device token, a short generic message and a task ID.
- Location
- United States
- Privacy
- https://www.apple.com/legal/privacy/
Apps you connect yourself
Some services only see your data because you connected them: signing in with Google or Microsoft, Google Calendar, Gmail and Google Drive, Slack, Notion, GitHub, Linear, Granola, Fireflies, PostHog and Nightjar, and the AI agent you connect over MCP (Claude, ChatGPT, Cursor or another client). Done passes data to them only when you, or an agent you connected, ask it to. They handle that data under your own agreement with them, so they are not our sub-processors. The Privacy Policy says what each one receives.
Changes to this list
We add a new sub-processor to this page at least 10 days before it starts processing customer personal data, and update the date at the top. This page is the notice: we don't send separate announcements. Section 7 of the Data Processing Agreement explains what you can do if you object. Questions: support [at] trydone.app.