List of subprocessors
These third parties have access (strictly limited) to data needed to run Vetta. Updated on 2026-05-28. We notify you by email at least 14 days before adding a new one.
| Service | Function | Country / Region | Policy / DPA |
|---|---|---|---|
| Strava (Strava, Inc.) | Sincronización de actividades del usuario (OAuth) | US | privacy |
| Supabase (Supabase, Inc.) | Autenticación Google OAuth y validación de tokens | US / EU | privacy |
| Lemon Squeezy (Lemon Squeezy LLC) | Procesamiento de pagos USD/EUR (merchant of record) | US / EU | privacy |
| Mercado Pago (MercadoLibre) | Procesamiento de pagos ARS | Argentina | privacy |
| Resend (Resend, Inc.) | Envío de emails transaccionales (welcome, reset, alertas) | US | privacy |
| Railway (Railway Corp.) | Hosting de la aplicación y storage de volúmenes | US (regiones AWS/GCP) | privacy |
| Cloudflare (Cloudflare, Inc.) | DNS, CDN y proxy de seguridad | Global (Anycast) | privacy |
| Sentry (Functional Software, Inc.) | Telemetría de errores (stack traces, sin PII) | US | privacy |
| UptimeRobot (UptimeRobot, Ltd.) | Monitor HTTP del healthcheck (sin acceso a datos de usuarios) | US / EU | privacy |
| Google Cloud (Google LLC) | OAuth de Google (vía Supabase) — solo en el flow de login | Global | privacy |
If you delete your Vetta account and want us to cascade the deletion to subprocessors, email rensont@gmail.com — some take up to 90 days depending on subprocessor.