Legal

Subprocessors

Under legal review · version 21 August 2026

This is the complete current text and it describes what the product actually does today. It has been prepared in-house and sent to external counsel; it is not yet lawyer-approved and may change before public launch. Questions: privacy@visibleneeds.site.

The complete list of third parties that process data for Visible Needs. Stripe / RevenueCat is listed because it is planned; nothing is billed today and no billing provider holds any data yet.

Provider	Purpose	Location
Supabase	Authentication, database, file storage	EU region
Vercel	Website hosting & content delivery	Global edge
Resend	Transactional email (waitlist confirmations, invitations), and receiving mail you send to our support address	EU (Ireland · eu-west-1)
Sentry	Crash reports from the app if you turn them on, plus server-side errors from this website. No browser SDK, no cookie	EU
Expo	Passes notifications to Apple and Google, if you turn notifications on. It sees your device’s push token and a fixed sentence such as “An agreement was assigned to you” — never anything you wrote	United States
Apple · Google	Deliver those notifications to your iPhone or Android phone	United States
hCaptcha	Checks that a person, not a bot, is signing in, signing up or resetting a password with email and password. It sees your IP address and browser signals, not your email or password	United States
Stripe / RevenueCat	Subscription billing (planned)	Global

Version 21 August 2026. Written against the running system rather than from a template — this list is maintained alongside the code, and a change that adds a provider adds its row in the same commit. If something here does not match what the product does, the page is wrong and we want to know: get in touch.