Travel Stacks LLC
Subprocessors
Last updated: May 17, 2026
TravelStacks uses the following third-party service providers (subprocessors) to deliver its service. Where personal data is transferred to these providers, we ensure appropriate safeguards are in place. This page is updated when subprocessors are added, removed, or materially changed.
| Subprocessor | Purpose | Data Categories | Location | DPA Status | Privacy Policy |
|---|---|---|---|---|---|
| Vercel | Application hosting and edge delivery | All application data transiting or at rest on platform | US (global edge nodes) | DPA needed | View policy ↗ |
| Neon | Managed PostgreSQL database | All application data stored in the database | US | DPA needed | View policy ↗ |
| Clerk | Authentication and user identity management | User identity (email, name, phone, sessions) | US | DPA needed | View policy ↗ |
| Stripe | Payment processing | Payment card data, billing information | US | DPA in place (via Stripe T&Cs) | View policy ↗ |
| Anthropic | AI-powered claim assistant (Phoenix) | Conversation content entered by users | US | DPA needed | View policy ↗ |
| Resend | Transactional email delivery | Email address, name, email content | US | DPA needed | View policy ↗ |
| Telnyx | SMS messaging | Phone number, SMS message content | US | DPA needed | View policy ↗ |
| MailerLite | Newsletter and marketing email | Email address, name, marketing preferences | US | DPA needed | View policy ↗ |
| Google (GA4) | Website analytics | Behavioral data (pages, events, session data) | US / EU | Via Google T&Cs; consent-gated | View policy ↗ |
| Ahrefs | Web analytics | Behavioral data (pages, referrers) | US | DPA needed — evaluate ongoing need | View policy ↗ |
Vercel
DPA neededApplication hosting and edge delivery
All application data transiting or at rest on platform
US (global edge nodes)
Privacy policy ↗Neon
DPA neededManaged PostgreSQL database
All application data stored in the database
Clerk
DPA neededAuthentication and user identity management
User identity (email, name, phone, sessions)
Stripe
DPA in place (via Stripe T&Cs)Payment processing
Payment card data, billing information
Anthropic
DPA neededAI-powered claim assistant (Phoenix)
Conversation content entered by users
MailerLite
DPA neededNewsletter and marketing email
Email address, name, marketing preferences
Google (GA4)
Via Google T&Cs; consent-gatedWebsite analytics
Behavioral data (pages, events, session data)
US / EU
Privacy policy ↗Ahrefs
DPA needed — evaluate ongoing needWeb analytics
Behavioral data (pages, referrers)
Get notified when subprocessors change
To receive email notifications when we add or remove subprocessors, submit a request below. This creates a logged record in our privacy management system.