Trust
Sub-processors
These are the third parties that help us run Jettova. We list each one, why we use it, and what category of data it processes. This list reflects the vendors actually integrated in the product; we update it as our infrastructure changes.
Infrastructure and service sub-processors
| Sub-processor | Purpose | Data category processed |
|---|---|---|
| Supabase | Managed Postgres database, authentication (incl. SSO/SAML & SCIM for Teams), and storage | Account and profile data, trip content, org membership and roles, hashed credentials/tokens |
| Vercel | Application hosting and content delivery | Request metadata and IP address (per-request geo is computed and not stored) |
| Anthropic | AI trip planning and receipt OCR (vision) | Trip planning inputs; receipt images (processed for OCR, then discarded — not stored) |
| Stripe | Payment processing and subscription billing | Billing contact and payment details entered directly with Stripe (Jettova stores no card data) |
| Duffel | Flight and stay search and booking infrastructure | Search parameters such as routes, dates, and traveler counts |
| Foursquare | Venue and place data used to verify suggested venues | Place and location search queries (no account identifiers) |
| Resend | Transactional and notification email delivery | Recipient email address and message content |
| Firebase Cloud Messaging (Google) | Push notification delivery to Android and web devices | Device push tokens and notification content |
| Apple Push Notification service (Apple) | Push notification delivery to iOS devices | Device push tokens and notification content |
| Upstash | Redis-backed API rate limiting | Hashed API key or IP address used as the rate-limit identifier |
| Sentry | Application error monitoring | Diagnostic and error data, which may include limited request context |
Travel and commerce partners
Jettova is not the merchant of record for any booking. For the partners below, you transact on the partner's own site under their terms and privacy policy — Jettova generally sends only search parameters or referral click-throughs, not your payment details.
| Sub-processor | Purpose | Data category processed |
|---|---|---|
| Expedia Group | Flights and hotels (affiliate links / inventory) | Search parameters; bookings and payment occur on the partner's own site |
| Viator | Tours and activities (affiliate links) | Search parameters; bookings and payment occur on the partner's own site |
| Kayak | Flight and hotel meta-search (affiliate links) | Search parameters; bookings and payment occur on the partner's own site |
| Travelpayouts | Affiliate network and real-fare data for estimate accuracy | Search parameters and fare lookups (no account identifiers) |
| Airalo | Travel eSIMs (affiliate links) | Referral click-through; purchase occurs on the partner's own site |
| Ticketmaster | Live-event listings and links | Event queries; purchase occurs on the partner's own site |
| Unsplash | Destination imagery | Image search queries (no personal data) |
See also our Security overview, Data Processing Addendum, Data residency, and Privacy Policy.
Questions about a specific vendor? Ask us directly.