Draft — not yet finalized. This document still contains unresolved placeholder text and has not been approved for publication: [confirm region], [SMS / WhatsApp / push provider(s)], [confirm], [Identity / KYC provider(s)].

Subprocessors — 8055 Stays

HASU AURORA PRIVATE LIMITED · Last updated: 22 August 2026

To operate 8055 Stays, HASU AURORA PRIVATE LIMITED uses the third-party service providers ("subprocessors") below. Each processes personal data only on our instructions, under contract, and to the standard described in our Privacy Policy. We do not sell personal data.

Items marked (planned) are not yet live; we will move them into the active list when the corresponding feature launches.

Infrastructure & data hosting

Subprocessor	Purpose	Data processed	Region
Neon	Primary application database (PostgreSQL + PostGIS)	Accounts, profiles, listings, bookings, messages, reviews, media metadata	Singapore (AWS ap-southeast-1)
Cloudflare	Web/app delivery (Workers), authentication store (D1), media storage (R2 / Images), real-time (Durable Objects), background delivery (Queues), transactional email	Account, session, content, media, and delivery data	Global edge
Railway (Fly.io as portable alternative)	Hosting for the Go API and background worker	All data in transit through the API	Near Singapore
Upstash / managed Redis	Ephemeral cache and rate-limiting	Short-lived technical data, rate-limit counters	[confirm region]

Analytics & diagnostics

Subprocessor	Purpose	Data processed	Region
PostHog	Product analytics (opt-in) and safe exception capture	Named product events + internal user ID; allowlisted error class	United States

Identity & sign-in

Subprocessor	Purpose	Data processed	Region
Google	Optional "Sign in with Google"	Basic profile identifiers you authorise	Global (US-based)
Apple	Optional "Sign in with Apple" (Web, iOS and Android secure browser flow)	Basic profile identifiers you authorise	Global (US-based)

Maps

Subprocessor	Purpose	Data processed	Region
Google Maps Platform	Map search and display on the web	Map interactions, approximate/precise location when you use map features	Global (US-based)

On iOS, maps use Apple MapKit (first-party). Android currently opens the external Google Maps app for directions.

Operations

Subprocessor	Purpose	Data processed	Region
Slack	Internal operational/dead-letter alerts	System/operational metadata (not user-facing content)	United States

Payments (planned)

Subprocessor	Purpose	Data processed	Region
Razorpay (planned)	Guest payments and host payouts	Billing details, transaction status (card/UPI/bank credentials handled by the provider, not stored by us)	India
Cashfree (planned)	Guest payments and host payouts	As above	India

Communications (planned)

Subprocessor	Purpose	Data processed	Region
[SMS / WhatsApp / push provider(s)] (planned)	Transactional and opted-in messaging	Phone number/device token, message content	[confirm]

Verification (if used)

Subprocessor	Purpose	Data processed	Region
[Identity / KYC provider(s)] (if used)	Host/guest identity verification	Verification inputs and results	[confirm]

Changes & notice

We may update our subprocessors as the service evolves. Material changes will be reflected here with a new "Last updated" date. Questions: support@hasuaurora.com.