01Supabase
Provides database, authentication, and file-storage infrastructure. Depending on functions used, it may process account, contact, property, lease, maintenance, file, and technical-log data. A database region does not mean every service or support request is processed exclusively in that region. Learn more at supabase.com/privacy and supabase.com/legal/customer-resources/data-processing-addendum.
02Vercel
Provides website and application hosting, function execution, content delivery, and technical logs. It may process IP addresses, requests, responses, and information a function needs to process. Its infrastructure may operate in multiple locations. Learn more at vercel.com/legal/privacy-notice and vercel.com/legal/dpa.
03Resend
Supports transactional email delivery where used in the service configuration. It may receive recipient email, subject, content or template, an operational link, and delivery identifiers, and return delivery, bounce, complaint, or error events. Payment and maintenance notice templates direct recipients to the portal and do not include amounts, property addresses, documents, or private notes. Invitations and authentication messages may include access links. Learn more at resend.com/legal/privacy-policy and resend.com/legal/dpa.
04Stripe
Provides subscription billing and, where enabled, connected-account and payment services. It may process billing, business identity, payment-method, transaction, and fraud-prevention data. Stripe may act as an independent controller or processor depending on the activity and its agreements; it is not classified as a mere subprocessor for every function. Learn more at stripe.com/privacy, stripe.com/legal/dpa, and stripe.com/legal/connect-account.
05Cloudflare Turnstile
Helps protect sign-in screens and other enabled forms against abusive automation. It may process IP addresses, browser and device characteristics, and technical interaction signals needed to assess requests. It is used for security, not to submit rental documents or card information. Cloudflare determines parts of the processing under its own terms and notice; not all of its activities are described as mere subprocessing. Learn more at www.cloudflare.com/privacypolicy/.
06Changes and questions
This list identifies key service providers, not every entity a provider may use under its own contract. It does not mean every provider accesses every data category. Enabled functions and operational needs determine processing. We will update material changes and follow the notice process in the Data processing addendum. Request additional information at soporte@alquilaos.com.