Subprocessors
Draft, not yet in force. This page has not been reviewed by counsel and should not be treated as current.
These are the third parties that store or process data on our behalf so that CircaSale can work. Each is bound by contract to use the data only to provide its service to us. This page is referenced by our Privacy Policy.
All of them are configured to host data in the United States. CircaSale is offered only in the US, and data residency is part of what makes that true rather than merely stated.
| Provider | What it does | What it can see | Location |
|---|---|---|---|
| Supabase | PostgreSQL database | All application data | [US REGION] |
| Railway | API server hosting | All application data in transit | [US REGION] |
| Vercel | Hosting for the dashboard, consignor portal, and admin console | Static assets and request metadata. No application data at rest. | United States |
| Resend | Transactional and marketing email delivery | Recipient addresses and message contents | United States |
| Stripe | Payment processing for event fees | Billing name, email, address, and card details. We never receive the card number. | United States |
Changes
We will update this page before a new subprocessor starts handling personal information. To be notified of changes, write to [PRIVACY EMAIL].