'/%3e%3cg%20transform='matrix(4.5173%200%200%204.5173%20148.306%20145.6644)'%20id='160553'%3e%3cpath%20style='stroke:%20none;%20stroke-width:%200;%20stroke-dasharray:%20none;%20stroke-linecap:%20butt;%20stroke-dashoffset:%200;%20stroke-linejoin:%20miter;%20stroke-miterlimit:%204;%20is-custom-font:%20none;%20font-file-url:%20none;%20fill:%20rgb(53,151,104);%20fill-rule:%20nonzero;%20opacity:%201;'%20vector-effect='non-scaling-stroke'%20transform='%20translate(-30,%20-30)'%20d='M%2049.001%200%20H%2010.999%20C%204.934%200%200%204.934%200%2010.999%20v%2038.003%20C%200%2055.066%204.934%2060%2010.999%2060%20h%2038.002%20C%2055.065%2060%2060%2055.066%2060%2049.001%20V%2010.999%20C%2060%204.934%2055.065%200%2049.001%200%20z'%20stroke-linecap='round'/%3e%3c/g%3e%3cg%20transform='matrix(1%200%200%201%20150%20150)'%20style=''%20id='521668'%3e%3cpath%20xml:space='preserve'%20font-family='GetVoIP%20Grotesque'%20font-size='234'%20font-style='normal'%20font-weight='normal'%20style='stroke:%20none;%20stroke-width:%200;%20stroke-dasharray:%20none;%20stroke-linecap:%20butt;%20stroke-dashoffset:%200;%20stroke-linejoin:%20miter;%20stroke-miterlimit:%204;%20is-custom-font:%20true;%20font-file-url:%20https://cdn.pixelied.com/user-assets/fonts/e6b0c0c3-4f46-498b-ada0-fcc4c53b4fe1.ttf;%20fill:%20rgb(255,255,255);%20fill-rule:%20nonzero;%20opacity:%201;%20white-space:%20pre;'%20d='M-83.07-83.27L-40.95-83.27L-40.95-22.43L40.95-22.43L40.95-83.27L83.07-83.27L83.07%2073.51L40.95%2073.51L40.95%2015.01L-40.95%2015.01L-40.95%2073.51L-83.07%2073.51L-83.07-83.27Z'/%3e%3c/g%3e%3c/svg%3e){kind=small}
Sub-processors
Effective Date: 7 October 2026
HAPR uses the service providers below to run www.thehapr.com and the HAPR platform. Each one receives only the personal data it needs for its task, under a data processing agreement. Where a provider handles data outside the European Union, the transfer is covered by the EU Standard Contractual Clauses.
Our database and files are stored in the European Union (Frankfurt, Germany).
| Provider | What it does | Personal data it receives | Location |
|---|---|---|---|
| Supabase | Database, file storage, sign-in and server functions | All platform data, including attendee profiles and passport scans | European Union (Frankfurt) |
| Cloudflare | Hosts the website and the platform | IP address, pages requested, data in transit | Global network, United States company |
| Anthropic | AI features, including reading passport scans and the assistants | Passport images and the fields read from them, assistant questions with names and contact details replaced by placeholders, help chat and issue text with personal details removed | United States |
| Postmark | Sends emails | Recipient name and email, email content | United States |
| Stripe | Payments and invoices | Billing contact name, email and company. Card details go straight to Stripe. | United States and Ireland |
| Maps and place search in the platform, and Google Analytics on the website after you accept | IP address and browser details, place search text, a pseudonymous analytics id | United States | |
| Hunter | Finds business contacts at hotels for sourcing requests | The hotel's web domain is sent, hotel staff work contact details are returned | European Union |
| Sentry | Error tracking | Error messages and page paths, with emails, query strings, cookies and form contents removed | European Union (Germany) |
Changes
We update this page before a new provider receives personal data, and tell our customers as their data processing agreement requires.
| Date | Change |
|---|---|
| 7 October 2026 | First published list |