This page lists the third-party processors that NextEraPro Ltd. ("WayGenie") uses to deliver the WayGenie service. See our Privacy Policy for the change-notification procedure (30 days' advance notice via in-app banner).
The "Transfer safeguard" column shows which mechanism we rely on when the processor is outside the UK/EEA. We hold the executed agreement for each safeguard and will provide a redacted copy on request to team@waygenie.app.
Authentication and Account Management
| Processor | Jurisdiction | Purpose | Data categories | Transfer safeguard | Privacy notice |
|---|
| Clerk Inc. |
United States |
Authentication, password reset, OAuth sign-in, account session management |
Name, email, password hash, sign-in IP, device fingerprint, OAuth provider IDs |
EU–US DPF + UK IDTA / EU SCCs |
clerk.com/legal/privacy |
Payments
| Processor | Jurisdiction | Purpose | Data categories | Transfer safeguard | Privacy notice |
|---|
| Stripe Payments Europe Ltd. |
Ireland |
Payment processing for EU/UK customers |
Card last-4, card brand, billing address, billing country, transaction amount |
None required (intra-EEA / UK adequacy) |
stripe.com/privacy |
| Stripe Inc. |
United States |
Onward processing for fraud detection, tax reporting |
Same as above |
EU–US DPF + UK IDTA / EU SCCs |
stripe.com/privacy |
AI Providers
| Processor | Jurisdiction | Purpose | Data categories | Transfer safeguard | Privacy notice |
|---|
| Anthropic PBC |
United States |
AI itinerary generation (Claude API) |
Trip prompt: destination, dates, party size, interests, budget. No name, email, or account ID. |
EU–US DPF + UK IDTA / EU SCCs |
anthropic.com/legal/privacy |
| OpenAI, L.L.C. |
United States |
AI image generation |
Image prompt text. No name, email, or account ID. |
EU–US DPF + UK IDTA / EU SCCs |
openai.com/policies/privacy-policy |
Both providers contractually undertake not to train on data submitted via their commercial APIs (see our Privacy Policy).
Analytics
| Processor | Jurisdiction | Purpose | Data categories | Transfer safeguard | Privacy notice |
|---|
| Mixpanel Inc. |
US (EU data residency) |
Product analytics + session replay (25% sample, input-masked) |
Pseudonymous user ID, page views, feature events, IP-derived approximate location, session replay |
EU–US DPF + UK IDTA / EU SCCs |
mixpanel.com/legal/privacy-policy |
| Google LLC |
United States |
Google Analytics 4 + Google Fonts (CSS only) |
GA4: pseudonymous client ID, page views, IP (truncated). Fonts: request IP only. |
EU–US DPF + UK IDTA / EU SCCs |
policies.google.com/privacy |
Mapping, Weather, and Imagery
| Processor | Jurisdiction | Purpose | Data categories | Transfer safeguard | Privacy notice |
|---|
| Mapbox Inc. |
United States |
Geocoding, map tiles, places search |
Search query, request IP |
EU–US DPF + UK IDTA / EU SCCs |
mapbox.com/legal/privacy |
| Pexels GmbH |
Germany |
Stock destination imagery |
Search query, request IP |
None required (intra-EEA; UK adequacy) |
pexels.com/privacy-policy |
| Open-Meteo |
Germany |
Weather and forecast lookups |
Coordinates, request IP |
None required (intra-EEA; UK adequacy) |
open-meteo.com/en/terms |
Email
| Processor | Jurisdiction | Purpose | Data categories | Transfer safeguard | Privacy notice |
|---|
| Resend Inc. |
United States |
Transactional email delivery (sign-up, billing receipts, collaborator invites, account-deletion goodbye email) |
Recipient email, sender, subject, message body, delivery status |
EU–US DPF + UK IDTA / EU SCCs |
resend.com/legal/privacy-policy |
Hosting and Infrastructure
| Processor | Jurisdiction | Purpose | Data categories | Transfer safeguard | Privacy notice |
|---|
| Neon Inc. |
US (EU region selectable) |
Managed Postgres database hosting |
All data stored in our Postgres database |
EU–US DPF + UK IDTA / EU SCCs |
neon.tech/privacy-policy |
| Vercel Inc. |
United States |
Marketing-site hosting (waygenie.app) |
Request IP, request URL (no account data) |
EU–US DPF + UK IDTA / EU SCCs |
vercel.com/legal/privacy-policy |
Production database region: EU (Frankfurt), subject to change with notice via the subprocessor change procedure in our Privacy Policy.
Pre-Launch Processors Retained Until Migrated
| Processor | Jurisdiction | Purpose | Data categories | Transfer safeguard | Privacy notice |
|---|
| Tally NV |
Belgium |
Waitlist sign-up forms (legacy; will be removed once fully migrated) |
Name, email submitted to a Tally form |
None required (intra-EEA; UK adequacy) |
tally.so/help/privacy-policy |
How to Subscribe to Changes
We do not run a separate "subprocessor changes" mailing list. The notification path is:
- The "Last updated" date at the top of this page bumps.
- Signed-in users see an in-app banner for 30 days announcing the change.
If you want to be more formally notified, email team@waygenie.app with the subject line "subprocessor notifications" and we will add you to a manual list.