Legal

Sub-processors

Last updated · 25 July 2026

The third parties that process data on our behalf, what each one handles, and where it runs. We publish this rather than hold it on request.

1. How to read this register

A sub-processor is a company we engage that may process personal data on our behalf in order to deliver our services. We engage each one under contractual data-protection terms, and we share only the data that the purpose requires.

Certifications listed below are held by those providers, not by Comfort Curators. We are building toward ISO/IEC 27001 and are not yet certified; we do not present a provider's certification as our own.

2. Infrastructure and hosting

  • Cloudflare, Inc. — content delivery, DNS, edge compute and application security for comfortcurator.com and SuperhostOS. Processes visitor request metadata (IP address, user agent).
  • Application hosting and managed PostgreSQL for the website's API. Processes all data submitted through the site's forms and accounts. The current provider is named in our data-processing addendum, available on request to privacy@comfortcurators.in.
  • Neon, Inc. — managed PostgreSQL for SuperhostOS. Processes operator account and operational data.
  • Amazon Web Services, Inc. — object storage for uploaded files and media.

3. Communications

  • Zoho Corporation (Zoho Mail, ZeptoMail) — company mailboxes and transactional email, including sign-in codes. Processes recipient email addresses and message content.
  • Resend (and its underlying email infrastructure) — transactional email fallback, so a single provider outage cannot block sign-in.
  • Meta Platforms, Inc. (WhatsApp Business) — where you choose to contact us on WhatsApp. Processes your phone number and message content.

4. Artificial intelligence

AI providers receive only the content needed to generate a response for you — for inference, not to train their public models. See our AI Transparency page.

  • OpenAI, L.L.C. — assistant and reasoning features.
  • Cloudflare Workers AI — open-model inference, transcription and vision, executed on Cloudflare's network.

5. Analytics, scheduling and support

  • Google LLC (Tag Manager, Analytics, Ads) — website analytics and advertising measurement, loaded only after you consent to analytics/advertising cookies.
  • Calendly LLC — meeting scheduling, where you book a call with us.
  • Functional Software, Inc. (Sentry) — application error monitoring. Processes technical diagnostic data.

6. Hospitality platforms

Airbnb, Inc. is not a sub-processor of ours — it is an independent controller of the bookings you make on its platform, and its own terms and privacy policy govern that relationship. We receive booking and calendar information from Airbnb in order to operate the stay.

7. Changes and notice

We update this register when we add or remove a sub-processor. For a Data Processing Agreement, the current list in machine-readable form, or to raise an objection to a particular sub-processor, write to privacy@comfortcurators.in.