Subprocessor / Third-Party Services List

1. Overview

OMVA uses third-party providers to operate the platform. Providers may change over time.

2. Current or referenced providers

Supabase

Purpose: authentication, database, storage, edge/database functions.

Data: account data, site data, customer/referral records, analytics, support, careers, payout metadata, storage files.

Vercel

Purpose: hosting, serverless functions, deployments, cron.

Data: request/technical data, application hosting data, logs.

Cloudflare

Purpose: Workers, routing, CDN/cache, custom domains, DNS/SaaS, security/performance.

Data: request data, IP, host/domain, routing headers, technical logs.

Wise

Purpose: payout recipients, payout quotes, payout transfers.

Data: payout recipient details, bank details, country/currency, transfer records.

Resend

Purpose: transactional email, magic links, site-branded emails.

Data: email addresses, email content, delivery metadata.

Groq

Purpose: AI chat, copy generation, palette/content assistance, product help.

Data: prompts, context, generated output, usage metadata.

Sentry

Purpose: error monitoring and diagnostics.

Data: error logs, device/browser/request metadata, redacted diagnostic information.

Google / Apple OAuth

Purpose: authentication.

Data: identity/authentication data from provider.

Google Fonts

Purpose: fonts.

Data: browser/request metadata when fonts are loaded from Google infrastructure.

IP/location services such as ipify/ipapi

Purpose: IP lookup, approximate location, diagnostics, analytics, security.

Data: IP address and derived location/technical metadata.

Future billing provider such as Stripe

Purpose: subscriptions, checkout, invoices, billing portal.

Data: billing/customer/payment metadata. Do not state Stripe is live unless implemented.

Future insurer/provider integrations

Purpose: quote, referral, policy, or customer fulfilment.

Data: customer quote/request details relevant to the product.

Future domain/registrar providers

Purpose: domain search, purchase, holding, DNS, custody, transfer.

Data: domain, registrant/owner, DNS, billing, transfer metadata.

3. Updates

OMVA may update this list as providers change.

4. Contact

Subprocessor questions: support@omva.co.nz.