Sub-processors
Last updated April 5, 2026
Tobinrin works with a small number of trusted service providers ("Sub-processors") to operate the Platform. Each Sub-processor processes Personal Data on our behalf under a written agreement that restricts how your data may be used and requires appropriate safeguards. This page lists our current Sub-processors and is kept up to date. We will update the "last updated" date above whenever the list changes. For context on how we use these providers, please see ourย Privacy Policy.
| Sub-processor | Purpose | Data | Location |
|---|---|---|---|
| Amazon Web Services | Cloud hosting for the Platform and messaging-app verification | Account, request metadata, phone number (for verification) | Global |
| Cloudflare | Object storage for user-uploaded media and content delivery | User-generated media, account identifiers, request metadata | Global |
| Paystack | Payment processing, payout settlement, and payment-risk screening | Contact, transactional, payment method details | Nigeria |
| Supabase | Managed database and authentication infrastructure | Account, profile, booking, messaging, Content | Global (United States, European Union) |
| Resend | Transactional email delivery (verification, password reset, booking notifications, invitations) | Contact, transactional email content | United States |
| Flodesk | Optional marketing and newsletter email (opt-in only) | Email address, engagement events | United States |
| Google Maps Platform | Map display, address autocomplete and address-search suggestions, geocoding, and directions for marketplace discovery | Approximate location, address queries, coordinates, IP address | Global |
| Smile Identity | Identity verification (KYC) and business verification (KYB) | Identity documents, selfie/liveness image, business-registration documents | Nigeria, Kenya, South Africa, United States |
| Inngest | Background job orchestration for queued tasks (e.g. payment provisioning, async notifications) | Account, transactional (limited to what a given job requires) | United States |
| PostHog | Product analytics, feature usage, and A/B testing | Pseudonymous user identifier, session and event data, device information | United States, European Union |
| Sentry | Error and performance monitoring | Technical stack traces, session context, limited user identifier | United States, European Union |
| Arcjet | Security: rate limiting, bot protection, fraud prevention, email validation | IP address, request metadata, email address (for validation) | Global |
In addition to the Sub-processors listed above, we may rely on professional advisers (such as lawyers, accountants, and auditors) who are bound by duties of confidentiality, and we may use authentication providers (such as Google) when you choose to sign in with a social account; in that case, the provider acts as your identity provider rather than our Sub-processor. We may update this list from time to time as our service providers change. If you would like to be notified of changes in advance, or if you have any questions about how a Sub-processor handles your data, please contact us atย privacy@tobinrin.com