Supabase
- Purpose
- Database, authentication, edge functions
- Data categories
- Account data in the Identity project; carrier, review, and letter250 data in the separate Content project
- Region
- United States (Ohio / us-east-2)
Subprocessors
These are the vendors and self-managed services currently used to run RateMyDOT. These vendors operate under their published standard data-processing terms, accepted with the corresponding service terms. RateMyDOT has not negotiated custom terms and this page is not a legal opinion about their sufficiency. The self-managed redaction service runs only on the Hostinger server listed below and is not a separate vendor. We will give 30 days’ notice before adding a new vendor.
| Vendor | Purpose | Data categories | Region |
|---|---|---|---|
| Supabase | Database, authentication, edge functions | Account data in the Identity project; carrier, review, and letter250 data in the separate Content project | United States (Ohio / us-east-2) |
| Hostinger | Web application hosting (VPS); also the infrastructure the self-managed redaction service runs on | Standard web request handling and transient in-memory redaction processing -- no durable data store on this infrastructure | United States (Boston) |
| Resend | Transactional and account email delivery | Recipient email address and transactional email content | United States (Northern Virginia / us-east-1) |
| PostHog | Anonymous product analytics | Anonymous usage events under a random browser identifier. No account identity, review content, or letter content. Disabled entirely for browsers sending GPC or Do Not Track | United States |
Hostinger
- Purpose
- Web application hosting (VPS); also the infrastructure the self-managed redaction service runs on
- Data categories
- Standard web request handling and transient in-memory redaction processing -- no durable data store on this infrastructure
- Region
- United States (Boston)
Resend
- Purpose
- Transactional and account email delivery
- Data categories
- Recipient email address and transactional email content
- Region
- United States (Northern Virginia / us-east-1)
PostHog
- Purpose
- Anonymous product analytics
- Data categories
- Anonymous usage events under a random browser identifier. No account identity, review content, or letter content. Disabled entirely for browsers sending GPC or Do Not Track
- Region
- United States