Viva SocialViva Social — Subprocessors
Effective: 2026-08-13
These are the third parties that process personal data on our behalf. Our Privacy Policy explains what each category of data is and why we hold it; this page is the list itself, kept current, so that changes are visible.
Status note, 2026-08-13. Viva Social has not launched. Several of these vendor accounts are not yet provisioned, so the data processing agreement column below records the state we require before any production data is processed, not a set of contracts already executed. Once each account is created and its DPA is accepted, this page becomes a record of executed agreements and this note is removed. We would rather publish that distinction than imply contracts that do not yet exist.
Current subprocessors
| Subprocessor | Purpose | Data processed | Location | DPA status |
|---|---|---|---|---|
| Supabase, Inc. | Database, authentication, file storage, edge compute | Effectively all account data | United States | Required before processing |
| Mapbox, Inc. | Map rendering and geocoding | Coarse location for tile requests, place queries | United States | Required before processing |
| Stream.io, Inc. | Real time chat transport and message moderation signals | Chat text, chat images, reactions | United States | Required before processing |
| Stripe, Inc. | Identity verification | Government ID document, live selfie, derived facial geometry. See the Biometric Data Policy | United States | Required before processing |
| Twilio Inc. | SMS for one time passcodes and share-plans links | Phone number, message content of the OTP or share link | United States | Required before processing |
| Resend, Inc. | Transactional email | Email address, message content | United States | Required before processing |
| Functional Software, Inc. (Sentry) | Crash and error diagnostics | Error traces with personal data redacted before transmission | United States | Required before processing |
| PostHog, Inc. | Product analytics | Event names, timestamps, pseudonymous identifiers | United States | Required before processing |
| OpenTable, LLC | Restaurant reservation handoff | Click events with attribution parameters. You leave Viva Social at this point and OpenTable's own terms apply | United States | Affiliate agreement |
| Apple Inc. | Sign in with Apple, push notifications | Authentication identifier, device push token | United States | Apple platform terms |
| Google LLC | Google sign in, Android push notifications | Authentication identifier, device push token | United States | Google platform terms |
Infrastructure sub-subprocessors
Supabase runs on Amazon Web Services. Stream, Stripe, Twilio, Resend, Sentry and PostHog each use their own infrastructure providers, disclosed in their respective subprocessor lists.
International transfers
All of the above process data in the United States. For members in the European Economic Area and the United Kingdom, transfers rely on the EU-US Data Privacy Framework where the vendor is certified, and on Standard Contractual Clauses otherwise. See the Privacy Policy for the fuller description.
Changes to this list
We will publish an update to this page before a new subprocessor begins processing personal data. If you have a data processing agreement with us that entitles you to advance notice of subprocessor changes, we will give that notice by email to the address on your agreement.
To be notified of changes, or to object to a new subprocessor, email support@technologyadvantagesllc.com.
What we do not use
We do not use advertising networks, data brokers, cross-context behavioural advertising vendors, or any party that receives personal data for its own purposes. We do not sell or share personal information as those terms are used in the California Consumer Privacy Act.
Technology Advantages LLC, 28 Valley Road, Montclair, New Jersey 07042, USA · support@technologyadvantagesllc.com