Legal
Sub-processors
The third parties that help us run Recal, and what each one processes
Last updated: July 2026
Recal uses the third-party service providers below ('sub-processors') to provide the platform. Each processes personal data only as needed for its function, under a data processing agreement with Recal. We give advance notice before adding or replacing a sub-processor.
| Provider | Purpose | Data received | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud file/photo storage (S3) | Files, documents, photos you upload | EU (eu-north-1, Stockholm) |
| AWS Cognito | User authentication | Email, encrypted password | EU (eu-north-1, Stockholm) |
| MongoDB Atlas | Primary database | All account and operational data | EU (Frankfurt, Germany) |
| Vercel | Application hosting | All request data transiting the app | EU region (Paris) |
| Vercel AI Gateway | Routing of AI requests to model providers | AI prompts and attachments (zero-retention) | EU / US providers |
| Anthropic | AI model provider (Ask Recal assistant) | AI prompts (zero-retention, no training) | US (SCCs) |
| OpenAI | AI model provider (property-description generator) | Property facts only — no guest data | US (SCCs) |
| Stripe | Subscription payment processing | Name, email, billing data (no card numbers stored by Recal) | US/EU (SCCs) |
| Resend | Transactional and product-update email | Name, email, message content | US/EU |
| Pusher | Real-time messaging | In-app message content, presence | EU cluster |
| Browser push services (Google FCM, Apple, Mozilla) | Delivering web push notifications you enable | Encrypted notification payloads; push endpoint metadata | US/EU (payloads end-to-end encrypted) |
| Crisp | Support chat (on consent) | Name, email, chat content | France (EU) |
| PostHog | Product analytics and session replay (on consent) | Usage events; replay with all text masked | EU (eu.i.posthog.com) |
| Sentry | Error and crash reporting | Pseudonymous account id only — no name/email/IP | US/EU |
| Mapbox | Maps and geocoding | Property addresses/coordinates | US/EU (SCCs) |
| WeatherAPI | Weather forecasts | Property coordinates only — no personal data | US |
| Meta (Facebook) Pixel | Advertising conversion measurement (on consent) | Signup/browsing events on marketing pages | EU/US (SCCs) |
| Google Ads | Advertising conversion measurement (on consent) | Signup conversion events and ad click identifier — no email address or name | EU/US (SCCs) |
Changes to this list
When we intend to add or replace a sub-processor, we update this page and notify account holders in advance, so you have the opportunity to object on reasonable data-protection grounds before the change takes effect.
Contact
For questions about our sub-processors, or to object to a planned change, contact info@recal.co.
See also: Privacy Policy, Data Processing Agreement.