Sub-processors
These are the service providers that may process personal data for Estate CRM. For the data that agencies keep in the app, they act as our sub-processors under the Data Processing Agreement.
We tell account owners about any new or replaced sub-processor at least 30 days in advance, by e-mail or in the app, so they can object (DPA, section 7).
| Provider | Purpose | Data | Location | Required? |
|---|---|---|---|---|
| Contabo Contabo GmbH | Server hosting: application, database, backups on the server | All service data | Germany (EU) To confirm: Confirm the data-centre location of the server. | Required |
| Cloudflare Cloudflare, Inc. | DNS, CDN and network protection; R2 storage for listing photos, documents and off-site backups; e-mail routing of portal lead e-mails | Traffic data (IP addresses); stored files and backups; inbound lead e-mails | Global network; R2 storage region [EU — confirm] Transfer safeguard: USA — Standard Contractual Clauses / EU-US Data Privacy Framework To confirm: Confirm whether the R2 buckets use the EU jurisdiction setting. | Required |
| Stripe Stripe Payments Europe, Ltd. | Subscription billing and card payments | Agency billing details, billing contact, payment data (held by Stripe, not by us) | Ireland (EU); group companies in the USA Transfer safeguard: USA — Standard Contractual Clauses / EU-US Data Privacy Framework | Required |
| SMTP e-mail provider [Provider — to be chosen] | Sending transactional e-mails (sign-in, invitations, reminders, match and alert e-mails to clients) | Recipient name and e-mail address, message content | [To be confirmed] To confirm: Provider not chosen yet — fill in before launch. | Required |
| Anthropic Anthropic, PBC | AI writing: listing descriptions, translations and message drafts | Public listing facts; for message drafts also the agency and agent name (and agent phone), the client’s first name and what they are looking for, a viewing’s time and meeting point, the client’s enquiry text and the agent’s own notes | USA Transfer safeguard: USA — Standard Contractual Clauses | Only when a user presses an AI button |
| Sentry Functional Software, Inc. (Sentry) | Error monitoring of the app and the API | Technical error reports; the user’s internal id only (no names, e-mails, IP addresses or request bodies) | [EU or USA — depends on the Sentry region chosen] Transfer safeguard: If USA — Standard Contractual Clauses / EU-US Data Privacy Framework | Only if error monitoring is switched on |
| Google Google Ireland Limited | Two-way Google Calendar sync, for users who connect their own calendar | The user’s own viewings, meetings, calls and tasks: title with the client’s name, times, meeting place, the activity text and the listing’s reference and title (never the client’s phone or e-mail, never internal notes) | EU and USA Transfer safeguard: USA — Standard Contractual Clauses / EU-US Data Privacy Framework | Optional, per user |
| Telegram Telegram Messenger Inc. | Alerts about new enquiries and reminders, for users who link Telegram | Alert text: the client’s name, e-mail and phone, the listing and the enquiry message; reminder titles | Outside the EEA [to be confirmed] Transfer safeguard: [Lawyer to confirm the transfer basis] To confirm: Telegram does not offer a standard DPA; the lawyer should decide whether to keep it, and on what basis. | Optional, per user |
| dash.smscy.com (Ultimate SMS) [Operator of dash.smscy.com — to be confirmed] | Sending SMS to the agency’s clients through the agency’s own account | Recipient phone number, message text, sender name | Cyprus (EU) [to be confirmed] To confirm: The agency contracts with the SMS provider itself; the lawyer should decide whether it is our sub-processor or the agency’s own provider. | Only if the agency connects its own SMS account |
| OpenStreetMap tiles OpenStreetMap Foundation | Map images in the app (loaded by the user’s browser) | The user’s IP address and the map area viewed | United Kingdom Transfer safeguard: UK — adequacy decision To confirm: Default map tiles until a commercial tile provider is set (VITE_MAP_TILE_URL). Replace this row with that provider. | Required |
See also the Data Processing Agreement and the Privacy Policy.