Data Processors
The following parties process personal data on behalf of BirthdayDeals. A Data Processing Agreement (DPA) has been concluded with each processor in compliance with GDPR.
Last updated: October 13, 2026
Supabase Inc.
Database hosting, authentication, file storage (website and app)
Location: EU (Frankfurt)
Vercel Inc.
Website hosting, server functions and edge computing
Location: EU (arn1)
Resend Inc.
Transactional and support email
Location: US (EU SCCs)
Brevo (Sendinblue SAS)
Birthday emails and newsletters
Location: EU
Sentry (Functional Software, Inc.)
Crash and error reporting (website and app)
Location: US
Expo (650 Industries, Inc.)
App updates and forwarding push notifications to Apple and Google
Location: US
Stripe
Payment processing (businesses)
Location: EU (Dublin)
Cloudflare, Inc. (Turnstile)
Bot protection on forms
Location: US
Upstash, Inc.
Rate limiting (temporary counters per IP address or email address)
Location: US
PostHog Inc.
Product analytics (optional, after consent)
Location: US
Google (Gemini API)
AI assistance for staff when drafting and translating support replies and deal texts
Location: US
Transfers outside the EEA: for service providers in the US we rely on the EU-US Data Privacy Framework, where the recipient is certified under it, and otherwise on the European Commission's standard contractual clauses.
Not processors but independent controllers: Apple and Google, when you sign in with their account and for delivering push notifications in the app, and FlagCDN (flagcdn.com), which serves the flag images in the language picker and receives your IP address when doing so.
Questions about data processing?
Contact our data protection officer at privacy@birthdaydeals.eu