Last updated
May 22, 2026
Subprocessors
Salonera relies on a small set of trusted third parties to deliver the service. The list below states what each one is used for and where the data is stored. The list is reviewed whenever a service is added or replaced.
Vercel
Purpose: website hosting, edge functions, image optimization, plus Vercel Analytics and Speed Insights (only with consent to performance and analytics cookies).
Region: United States. Transfers operate under Standard Contractual Clauses (SCCs) with supplementary safeguards.
Data processing agreement: yes.
Cloudflare (Turnstile)
Purpose: bot detection and abuse prevention on the sign-in and booking flows (a CAPTCHA replacement).
Region: global edge network. Cloudflare Inc. is US-based. Transfers operate under Standard Contractual Clauses (SCCs) with supplementary safeguards.
Data processing agreement: yes.
Supabase
Purpose: database (Postgres), authentication, and file storage for images and documents.
Region: EU (eu-central-1, Germany). Data is stored in the EU/EEA; the DPA covers any access by personnel outside the EEA.
Data processing agreement: yes.
Sentry
Purpose: error reporting and performance monitoring. Sentry Session Replay runs only on errors, with text masked and media blocked.
Region: EU (de.sentry.io, Germany). Data is stored in the EU/EEA; the DPA covers any access by personnel outside the EEA.
Data processing agreement: yes.
PostHog
Purpose: product analytics, only after consent in the cookie banner.
Region: EU (eu.i.posthog.com).
Data processing agreement: yes.
Resend
Purpose: transactional email (booking confirmations, OTP sign-in, invitations).
Region: EU (eu-west-1, Ireland). Data is stored in the EU/EEA; the DPA covers any access by personnel outside the EEA.
Data processing agreement: yes.
Upstash
Purpose: Redis-based rate limiting and short-lived caching to protect public endpoints.
Region: EU (eu-west-1, Ireland). Data is stored in the EU/EEA; the DPA covers any access by personnel outside the EEA.
Data processing agreement: yes.
Changes
We update this list whenever a provider changes or a region is moved. The date at the top reflects the latest revision.