Legal
Vendors that process personal information to operate Allocatin. We update this page when the list changes.
These organizations process personal information on our behalf as described in the Privacy Policy and, for Customer Content, the DPA. Each is bound by a contract that restricts use to providing their service to us.
| Vendor | Purpose | Primary location |
|---|---|---|
| Supabase, Inc. | Authentication, Postgres database, storage, edge functions | United States |
| Vercel Inc. | Web application hosting and content delivery | United States |
| Stripe, Inc. | Subscription billing and payment processing | United States |
| Resend, Inc. | Transactional and claim-outreach email delivery | United States |
| Google LLC (Analytics) | Optional website analytics, only after cookie consent | United States |
| Google LLC (Gemini) | Optional AI inference for matching assistance and in-product Q&A | United States |
| OpenAI, L.L.C. | Optional AI inference fallback for matching assistance and Q&A | United States |
| MiniMax | Optional AI inference fallback. Customers may request US/EU-only model routing. | As disclosed by the vendor (may include jurisdictions outside the EEA/UK) |
| Apple Inc. | App distribution and optional push-notification delivery on iOS | United States |
| Google LLC (Android / FCM) | App distribution and optional push-notification delivery on Android | United States |
Infrastructure may cache or transit data in additional regions for performance and resilience. Apple and Google process push tokens and app-store account data under their own terms when you use their stores.
Customers who want written notice of a material addition can email privacy@allocatin.com with the subject “Subprocessor notice.” We will give at least 14 days’ notice before a material new processor starts handling Customer Content, as described in the DPA.