Sub-processors

We use a small number of carefully chosen vendors to run the platform. Each one is bound by a Data Processing Agreement and processes personal data only on our instructions, in line with our privacy policy.

We update this page when we add, remove, or replace a sub-processor. Substantive changes are also communicated to active users by email at least 30 days in advance.

Active sub-processors

Hosting and database (Supabase)

Supabase Inc. provides our database, authentication, storage, and realtime infrastructure. Account and booking data, profile pictures, chat messages, and chat photo attachments are stored here. Region: United States (AWS us-east-1, N. Virginia). Privacy policy.

Application hosting (Vercel)

Vercel Inc. hosts the GoDushi web application and handles request routing, edge caching, and our domain certificates. Region: global edge network. Privacy policy.

Transactional email (Resend)

Resend Inc. delivers our transactional and operational emails (booking confirmations, password resets, host notices). They process the recipient's email address and message content for delivery purposes. Privacy policy.

Payments (Stripe)

Stripe, Inc. processes the online reservation fee you pay when you book. Your card details go directly to Stripe and are never stored on our servers. Stripe receives the payment amount, your card information, and a booking reference to process and protect the transaction. Privacy policy.

Translation (Google Cloud Translation)

When you tap “translate” on a review or a message written in another language, that text is sent to Google LLC's Cloud Translation service to produce the translation. Only the specific text you asked to translate is sent; we cache the result so the same text isn't sent twice. Privacy policy.

Authentication, optional (Google OAuth)

Users who choose to sign in with Google authorize Google LLC to share their basic profile (name, email, profile picture) with us. Used only when you select “Continue with Google” on sign-in. Privacy policy.

Authentication, optional (Sign in with Apple)

Users who choose to sign in with Apple authorize Apple Inc. to share their name and email address (or Apple's private relay address) with us. Used only when you select “Continue with Apple” on sign-in. Privacy policy.

Error monitoring (Sentry)

Functional Software, Inc. (Sentry) receives error reports when something breaks in the app or on the site, so we can fix it. Reports contain technical context (device and browser details, the actions leading up to the error) and may include your account identifier. We do not use Sentry's session-replay feature. Privacy policy.

Push notifications (Expo)

650 Industries, Inc. (Expo) delivers push notifications for the GoDushi app. They process your device's push token and the notification content (for example a new-message preview), and hand delivery off to Apple (APNs) or Google (FCM) depending on your device. Privacy policy.

Analytics, opt-in only (Google Analytics)

Google LLC provides aggregated traffic and behavior analytics for the site. It loads only after you accept the cookie banner (Google Consent Mode v2); declining means nothing is loaded or sent. You can withdraw consent at any time on our cookie policy page. Privacy policy.

Advertising measurement, opt-in only (Meta Pixel)

Meta Platforms, Inc. measures which Facebook and Instagram campaigns lead to visits and bookings via the Meta Pixel. It loads only after you accept the cookie banner; declining means nothing is loaded or sent. Events use a booking reference as deduplication ID, not your identity. You can withdraw consent at any time on our cookie policy page. Privacy policy.

Advertising measurement, opt-in only (Google Ads)

Google LLC. Our Google Analytics property is linked to a Google Ads account: booking conversions and audience segments measured by Analytics are shared with Google Ads to measure and improve ad campaigns. Because Analytics itself only receives data after you accept the cookie banner, this sharing covers consenting visitors only, and conversion reporting is aggregated — the advertising account does not receive your identity. Privacy policy.

What we don't use

Beyond the consent-gated tools above, we do not use other ad networks, retargeting pixels, third-party analytics SDKs, or session-replay tools. The GoDushi mobile app contains no advertising or third-party analytics SDKs at all — only crash reporting (Sentry) and push delivery (Expo), listed above.

Questions

Privacy or data-processing questions: support@godushi.com.