Processors that hold customer data
Each provider below processes customer data on our behalf, under contract, only to deliver the service to us. None of them may use it for their own purposes. We do not sell personal information and we do not share it with advertising networks or data brokers.
| Provider | What it does | Data involved | Region |
|---|---|---|---|
| Vercel | Application hosting, edge network, and logging | All data in transit through the application, request metadata, and diagnostic logs | United States |
| Supabase | Database, authentication, and file storage | All customer records, uploaded documents, account credentials, and authentication events | United States |
| Resend | Transactional email delivery | Recipient name and email address, and the contents of invitations, notifications, and security notices | United States |
| Stripe | Payment processing and subscription billing | Billing contact details, subscription status, and payment records. Card numbers are collected by Stripe directly and never reach our systems | United States and global |
Map and address services
These are called by your browser as you use the map. They receive the request needed to draw a map or resolve an address — an IP address, a map area, a typed query — and never receive event records, documents, or account information.
| Provider | What it does | Data involved | Region |
|---|---|---|---|
| OpenFreeMap / OpenStreetMap | Vector map tiles, fonts, and map sprites | Your IP address and the map area requested. No event data is sent | European Union and global CDN |
| Nominatim (OpenStreetMap Foundation) | Address lookup and geocoding | The address text you type into a location field, and your IP address | European Union |
| Esri / ArcGIS | Satellite and aerial basemap imagery | Your IP address and the map area requested. No event data is sent | United States |
Notably absent
There is no analytics platform, advertising network, session replay tool, customer data platform, or AI model provider in this list, because the product does not use one. See our AI and automation disclosure for what that means in practice.
International transfers
Our processors operate primarily in the United States; the OpenStreetMap services are hosted in the European Union. Where personal data moves between regions, transfers rely on the mechanisms in each provider’s own terms, including Standard Contractual Clauses where applicable.
Changes to this list
We keep this page current as infrastructure changes. Customers with a signed data processing agreement can request advance notice of a new subprocessor, and the objection rights in that agreement apply. To be notified of changes, or to request our DPA, write to privacy@myeventscape.com.