Subprocessors
Effective 2026-10-07 · Last updated 2026-10-07
These are the service providers that process personal data on our behalf to provide OpenReserve. Each is bound by a written contract that requires it to protect the data and use it only to provide its service to us. This list forms part of our Data Processing Addendum.
In plain English: The companies that help us run OpenReserve, what they do, and where.
| Subprocessor | Legal entity | Purpose | Data processed | Location |
|---|---|---|---|---|
| Amazon Web Services | Amazon Web Services, Inc. | Cloud hosting: application servers, database, file storage, transactional email and backups | All service data | United States |
| Stripe | Stripe, Inc. | Payment processing, saved cards, payouts and business verification (Stripe Connect); subscription billing | Payment details entered directly with Stripe, payment amounts and status, business owner verification details | United States and other countries where Stripe operates |
| Vercel | Vercel Inc. | Hosting and content delivery for the website and web dashboard | Web requests (IP address, browser details) and page content | United States and a global edge network |
| Expo | 650 Industries, Inc. (Expo) | Mobile app builds, over-the-air app updates and push notification delivery | Push notification tokens, notification content, app version and device type | United States |
| Cloudflare | Cloudflare, Inc. | DNS, content delivery and protection against attacks | IP addresses and request metadata | Global network |
| Microsoft 365 | Microsoft Corporation | Business email for support and account correspondence | Emails you send us and our replies | United States |
| Neon | Neon, LLC (a Databricks company) | Managed Postgres database hosting | All service data stored in the database | United States |
Your own Stripe account. When a business accepts payments, Stripe processes them on the business's own connected Stripe account, under the business's agreement with Stripe. For those payments, Stripe acts for the business, and for some purposes (such as fraud prevention and legal compliance) as an independent controller; see Stripe's privacy policy.
1. Changes to this list
We will update this page and email the account owner of each business at least 30 days before a new subprocessor starts processing personal data, except where we must act sooner to keep the Service secure or available, in which case we will tell you as soon as we can. If you have a reasonable data-protection objection to a new subprocessor, email hello@openreserve.app within that period; we will work with you in good faith to address it, and if we cannot, you may close the affected part of your account without penalty.
Questions about our subprocessors: hello@openreserve.app.