Sub-processors

We use a small number of carefully chosen vendors to run the platform. Each one is bound by a Data Processing Agreement and processes personal data only on our instructions, in line with our privacy policy.

We update this page when we add, remove, or replace a sub-processor. Substantive changes are also communicated to active users by email at least 30 days in advance.

Active sub-processors

Hosting and database (Supabase)

Supabase Inc. provides our database, authentication, storage, and realtime infrastructure. Account and booking data, profile pictures, and chat messages are stored here. Region: EU (Frankfurt, eu-west-3). Privacy policy.

Application hosting (Vercel)

Vercel Inc. hosts the GoDushi web application and handles request routing, edge caching, and our domain certificates. Region: global edge network. Privacy policy.

Transactional email (Resend)

Resend Inc. delivers our transactional and operational emails (booking confirmations, password resets, host notices). They process the recipient's email address and message content for delivery purposes. Privacy policy.

Payments (Stripe)

Stripe, Inc. processes the online reservation fee you pay when you book. Your card details go directly to Stripe and are never stored on our servers. Stripe receives the payment amount, your card information, and a booking reference to process and protect the transaction. Privacy policy.

Translation (Google Cloud Translation)

When you tap “translate” on a review or a message written in another language, that text is sent to Google LLC's Cloud Translation service to produce the translation. Only the specific text you asked to translate is sent; we cache the result so the same text isn't sent twice. Privacy policy.

Authentication, optional (Google OAuth)

Users who choose to sign in with Google authorize Google LLC to share their basic profile (name, email, profile picture) with us. Used only when you select “Continue with Google” on sign-in. Privacy policy.

Planned sub-processors (not yet active)

We intend to add the following marketing and analytics tools in a future release. They are not yet active on the platform. When we turn them on we will show a cookie consent banner, activate the tools only for users who give consent, and notify active users by email at least 30 days in advance.

Google Analytics (planned)

Google LLC, used for aggregated traffic and behavior analytics across the public site. Will run only with opt-in consent. Region: global, with EU data residency configured where available. Privacy policy.

Google Ads conversion tracking (planned)

Google LLC, used to measure which Google Ads campaigns lead to bookings. Will run only with opt-in consent. Conversion events report aggregated outcomes, not individual user identity, to the advertising account. Privacy policy.

Facebook (Meta) Pixel (planned)

Meta Platforms, Inc., used to measure which Facebook and Instagram ad campaigns lead to bookings. Will run only with opt-in consent. Conversion events use hashed identifiers where possible, and we plan to enable advanced data protections (Aggregated Event Measurement) on launch. Privacy policy.

What we don't use

Beyond the planned tools above (which require explicit consent), we do not use other ad networks, retargeting pixels, third-party analytics SDKs, or session-replay tools.

Questions

Privacy or data-processing questions: privacy@godushi.com.