Subprocessors
Effective: April 25, 2026
These are the third-party services that handle personal data on our behalf to operate Water Bowl Social. We keep this list current and notify users at least thirty (30) days before adding a new subprocessor that processes personal data.
01.Current Subprocessors
| Name | Service | Data accessed | Location | DPA |
|---|---|---|---|---|
| Supabase | Database, authentication, file storage | Email, hashed password, profile fields, dog profiles, check-ins, photos | US | Verify1 |
| Vercel | Web hosting, edge runtime, build pipeline | Request metadata, IP address, deployment logs | Global | Verify1 |
| Upstash | Redis cache, rate limiting | IP address, request fingerprints | Global | Verify1 |
| Mapbox | Map tiles and geocoding | IP address, approximate location at map session | US | Verify1 |
| Google Maps Platform | Venue data, Places lookups, photos | Server-to-server venue queries, no user identifiers | Global | Verify1 |
| OpenWeatherMap | Weather conditions for venue context | Coordinates of the venue or session, no user identifiers | Global | Verify1 |
| Anthropic | AI processing for content extraction and feature support | Venue text and tip content sent for analysis, no user identifiers | US | Verify1 |
| OpenAI | Embeddings, content moderation, extraction | Venue text, tip and note content sent for analysis, no user identifiers | US | Verify1 |
| Resend | Transactional and digest email delivery | Email address, message contents, delivery and open status | US | Verify1 |
| PostHog | Product analytics, web vitals | Pseudonymous user ID, event properties, IP address (truncated) | US | Verify1 |
1DPA status is being audited as of April 25, 2026. This list will be updated when the audit completes.
02.Notification of Changes
2.1 We notify users at least thirty (30) days before adding a new subprocessor that processes personal data. Notice is sent by email to the address associated with your account or posted as an in-app notice.
2.2 Where a change is required for security or legal reasons and a thirty (30) day window is not feasible, we will provide notice as promptly as practicable and update this page.
03.Related
For details on how Water Bowl Social collects, uses, and shares information, see our Privacy Policy.