Updated 23 September 2026. Security · Subprocessors · Data Processing Agreement · Privacy Policy
Naayya uses the following providers to deliver its service. Each is bound by data-protection terms, and international transfers use a lawful mechanism such as an adequacy decision or Standard Contractual Clauses.
Supabase
Database, authentication and file storage. Location: EU (Frankfurt, Germany). Data protection terms
Cloudflare
Application infrastructure and storage. Location: EU storage; global network. Data protection terms
GitHub
Source code hosting and development operations. Location: United States and global. Data protection terms
Vercel
Web hosting and content delivery. Location: Global. Data protection terms
Resend
Email delivery. Location: United States. Data protection terms
Twilio
SMS and messaging delivery. Location: Global. Data protection terms
Sentry
Error and performance monitoring. Location: Global. Data protection terms
PostHog
Product analytics. Location: Global. Data protection terms
Anthropic
AI assistance features. Location: United States and global. Data protection terms
Google Workspace
Optional Gmail, Calendar and Drive connections, and business support. Location: Global. Data protection terms
Firebase (Google)
Mobile push notifications. Location: Global. Data protection terms
Slack
Customer support and internal notifications. Location: Global. Data protection terms
Payments and connected platforms
Stripe, and Meta where a business connects it, process data under their own terms.
Changes
We notify businesses at least thirty days before adding or replacing a subprocessor, as set out in our Data Processing Agreement.