Legal
Subprocessors
Last updated: November 9, 2026
Roamze uses the service providers below to run the platform. Each one may process personal data that businesses (tour operators and guides) and their customers give us, on our instructions and only to provide the service. Our Data Processing Addendum describes how we choose and oversee them, and how we notify businesses before adding a new one.
Subprocessors
| Provider | What we use it for | Data it processes | Location |
|---|---|---|---|
| Supabase | Database, authentication and file storage | All business and customer data | United States (AWS us-east-1) |
| Google Cloud | Application hosting, secrets, logging | All business and customer data, in transit and in logs | United States (us-central1) |
| Cloudflare | Website hosting, content delivery, security and bot protection | All data in transit; IP addresses | Global edge network |
| Stripe | Subscriptions, payments to businesses (Stripe Connect), identity checks | Payment, payout and identity data | United States |
| Twilio | Text messages (SMS) | Phone numbers and message content | United States |
| Resend | Email delivery | Email addresses and message content | United States |
| Anthropic | AI: front-desk answers, reply and post drafts, assistant, AI-visibility checks | Content of requests, which can include business and customer data | United States |
| OpenAI | AI: voice transcription; chat when a business selects it; AI-visibility checks | Content of requests | United States |
| Google (Gemini / Vertex AI) | AI: chat when a business selects it; AI-visibility checks | Content of requests | United States |
| RunPod | Runs Roamze's own AI models | Content of requests | United States (region being confirmed) |
| Perplexity | AI-visibility checks | Business name, type and location (public details only) | United States |
| Sentry | Error monitoring and session replay (masked) | Error context, device and browser details | United States |
| Mapbox | Maps | Map locations viewed, IP address | United States |
| Dagster Labs (Dagster+) | Data pipelines for Roamze's public catalog | Holds database credentials; does not process customer records | United States |
| GitHub | Source code hosting | Source code (no customer data) | United States |
Services a business connects itself
A business can connect its own accounts, such as Google Business Profile, Google Calendar, Google Analytics, Google Ads, Meta (Facebook and Instagram), LinkedIn, Pinterest, Nextdoor, Bluesky and Reddit. Roamze then sends those services only what the business chooses to publish or sync. These services act under the business’s own agreement with them, so they are not Roamze subprocessors.
Website advertising and analytics tags
Roamze’s public website also loads advertising tags from Google (Tag Manager and Google Ads), Reddit and, on guide pages, Meta. These tags are described in our Privacy Policy. They are not used to process a business’s customer records.
Changes to this list
We update this page before a new subprocessor starts processing business customer data. Businesses with an active account get at least 30 days’ notice by email and can object as described in the Data Processing Addendum. To be told about changes, or for questions, email support@roamze.com.
