Sub-Processors
Effective: April 30, 2026 · Version 1.0
StingLeads relies on the third-party service providers listed below ("sub-processors") to operate the service. Each provider is bound by a written data-processing agreement appropriate to its role. We will publish updates to this list with at least 30 days' notice for any new sub-processor that processes personal data, except where shorter notice is required for security or legal reasons.
| Sub-Processor | Purpose | Data Processed | Region |
|---|---|---|---|
| Stripe, Inc. | Card payments, payouts, customer records. | Email, name, payment instrument, transaction metadata. | USA |
| Expo (650 Industries, Inc.) | Mobile push notification relay to APNs / FCM. | Expo push token, notification title/body. | USA |
| Apple Push Notification service | iOS notification delivery. | APNs device token, notification payload. | USA / Global |
| Google Firebase Cloud Messaging | Android notification delivery. | FCM device token, notification payload. | USA / Global |
| Supabase Inc. | Managed PostgreSQL database hosting. | All application data at rest, encrypted. | USA (us-east-1) |
| Hostinger International Ltd. | Application VPS hosting. | Application logs, server-side processing. | USA |
| Cloudflare, Inc. | CDN, DDoS protection, bot mitigation (Turnstile). | IP address, user-agent, TLS termination. | Global edge |
| SMTP Provider | Transactional email delivery (resets, deletion confirmations, receipts). | Email address, message body. | USA |
| Telegram FZ-LLC | Internal operator alerts (no homeowner PII). | Internal admin event metadata only. | Global |
Questions about this list? Email [email protected].