Effective September 4, 2026
To provide Xtreme Book, we rely on a small number of third-party service providers, each of whom processes data only to the extent needed to perform their specific function for us, under a contract that requires them to protect it. This page lists every one of them. We’ll update it when that list changes; for a significant addition, we’ll also note it in our release notes.
| Provider | What they do for us | What they process |
|---|---|---|
| Flutterwave | Payment processing — both your organization’s own Mobile Money/card collection on invoices, and Xtreme Book’s own Pro/Ultimate subscription billing. | Payment card / mobile money details, transaction amounts, and payer contact details needed to process a payment. Xtreme Book never receives full card numbers. |
| Google (Google OAuth) | Optional single sign-on, if you choose “Continue with Google”. | Your Google account’s name, email address, and profile photo. |
| Meta (Facebook Login) | Optional single sign-on, if you choose “Continue with Facebook”. | Your Facebook account’s name, email address, and profile photo. |
| Resend | Transactional email delivery — verification emails, password resets, shared invoices/receipts, and the notifications you’ve opted into. | Recipient email addresses and the content of the email being sent. |
| Railway | Application hosting and our managed PostgreSQL database. | All data described in our Privacy Policy, as it runs through or is stored by the app. |
| S3-compatible object storage | Stores files you attach to a record (receipts, supporting documents, logos). | The files themselves and their filenames. |
| Google Contacts API | Optional — only if you choose to import contacts from your Google account into Customers/Vendors. | The contact names, emails, and phone numbers you select to import; nothing is read without you initiating the import. |
No advertising network, no analytics/tracking pixel, and no data broker has access to Xtreme Book data. See our Cookie Policy for the (very short) list of cookies we set ourselves.
If your organization needs a signed Data Processing Addendum covering these sub-processors, contact privacy@xtremebook.com.
Questions about any of this? Contact us at legal@xtremebook.com.