Subprocessor and Vendor List
Last updated October 1, 2026.
Subprocessors (companies that process personal information for us)
These companies handle personal information as part of running OakTend, under their own published data processing terms, which limit them to using it only to provide their service to us.
Vendor
Supabase
- Purpose
- Database, authentication, file storage
- Data Categories
- All account, home, and marketplace data
- Location
- United States
- Privacy/DPA Page
- supabase.com/privacy
Vendor
Vercel
- Purpose
- Hosting, serverless functions, and cookieless web analytics
- Data Categories
- Request logs, IP address, cookieless page-view counts
- Location
- United States
- Privacy/DPA Page
- vercel.com/legal/privacy-policy
Vendor
Cloudflare
- Purpose
- DNS, email routing, Turnstile CAPTCHA
- Data Categories
- Domain routing information, and, for anyone who completes a CAPTCHA challenge, that fact
- Location
- United States / global
- Privacy/DPA Page
- cloudflare.com/privacypolicy
Vendor
Stripe
- Purpose
- Payment processing, subscriptions, invoices
- Data Categories
- Billing name/email, payment-method reference, invoice totals (never full card numbers)
- Location
- United States
- Privacy/DPA Page
- stripe.com/privacy
Vendor
Twilio
- Purpose
- Text-message delivery
- Data Categories
- Phone number, message content
- Location
- United States
- Privacy/DPA Page
- twilio.com/legal/privacy
Vendor
Resend
- Purpose
- Email delivery
- Data Categories
- Email address, message content
- Location
- United States
- Privacy/DPA Page
- resend.com/legal/privacy-policy
Vendor
Anthropic
- Purpose
- AI assistant (Ask OakTend), document and photo analysis
- Data Categories
- Question text, home-profile context, attached photos/documents
- Location
- United States
- Privacy/DPA Page
- anthropic.com/legal/privacy
Vendor
RentCast
- Purpose
- Property, parcel, and valuation data
- Data Categories
- Street address, including any unit number, and ZIP code
- Location
- United States
- Privacy/DPA Page
- rentcast.io/privacy
Vendor
Checkr
- Purpose
- Background checks for pros, when enabled
- Data Categories
- Name, email address
- Location
- United States
- Privacy/DPA Page
- checkr.com/privacy
Vendor
Google LLC (Google Analytics)
- Purpose
- Website analytics on our public pages, only for signed-out visitors who tap "Allow analytics";
- never while signed in or in the OakTend app;
- Google Signals and ad personalization off
- Data Categories
- Public page viewed (identifying parts of the address removed), referring site's domain, time on page, device and browser details, IP address (used by Google to estimate approximate location), a random cookie ID;
- no name, email, address, or account ID
- Location
- United States and other countries where Google operates
- Privacy/DPA Page
- policies.google.com/privacy; business.safety.google/processorterms
Other services (limited or no personal data)
These are not subprocessors in the traditional sense. Some are public government databases we look up, not vendors we pay; others are identity providers or infrastructure the device itself talks to. We still list them here for completeness.
Service
Photon (Komoot, built on OpenStreetMap)
- Purpose
- Address autocomplete while you type
- Data Categories
- The partial street address text only; no account data
- Location
- Not confirmed by us; Komoot GmbH, the operator, is based in Germany
- Privacy Page
- komoot.com/privacy
Service
California CSLB
- Purpose
- Public contractor-license lookup
- Data Categories
- A license number, checked against a public state database
- Location
- United States (California state agency)
- Privacy Page
- cslb.ca.gov
Service
CPSC SaferProducts
- Purpose
- Appliance recall lookup
- Data Categories
- An appliance brand name only
- Location
- United States (federal agency)
- Privacy Page
- cpsc.gov/privacy-policy
Service
Open-Meteo
- Purpose
- Weather forecasts behind alerts
- Data Categories
- City and state only, not your address
- Location
- Not confirmed by us; the service publishes from Europe
- Privacy Page
- open-meteo.com
Service
Google
- Purpose
- Sign in with Google (OAuth)
- Data Categories
- Name and email, only if you use this sign-in method
- Location
- United States
- Privacy Page
- policies.google.com/privacy
Service
Apple
- Purpose
- Sign in with Apple; App Store distribution; iOS push notifications
- Data Categories
- Name and email if you use Apple sign-in; a push token if you enable notifications
- Location
- United States
- Privacy Page
- apple.com/legal/privacy
Service
Web push services (Apple, Google, Mozilla)
- Purpose
- Delivering browser and app push notifications to your device
- Data Categories
- Your push-subscription address and keys, not your email or phone number
- Location
- United States
- Privacy Page
- Each provider's own privacy policy
We do not sell or share personal information with any vendor on this list for their own advertising purposes. Each subprocessor's own data processing terms limit it to using OakTend's data only to provide its service to us.
How we change this list
We review this list whenever we add or remove a vendor. We update this page before a new company starts handling personal information. If we remove a vendor, we will update this page once the transition to a new provider, or away from that function entirely, is complete.
If you have questions about a vendor on this list, or want to know more about a specific data flow, contact us at privacy@oaktend.com.
Our commitment. Each company in the first table handles personal information only under its own published data processing terms, which limit it to providing its service to us. We keep this page current.