Subprocessors
Subprocessors
Written 26 October 2026
Draft. This has been written from what Xenia does today and has not yet been reviewed by a lawyer. It is not final and should not be relied on until this notice is removed.
These companies process information for us in running Xenia. We choose them with care and tell hotels before we add or replace one that handles personal data.
Who we use
| Company | What it does for us | Information it handles | Where |
|---|---|---|---|
| Render | Runs the Xenia server, its database and its cache. | All information held in Xenia, stored by the application. | Frankfurt, Germany (currently; production region to be confirmed) |
| Cloudflare | Serves the website and the app to your browser, and stores uploaded files (such as ID images and logos) in an encrypted private store. Counts website visits without cookies. | Pages you load; encrypted files; visit counts. | Worldwide network; stored files in the region chosen for the store |
| Mailgun | Sends email: sign-in codes, invitations, receipts, invoices and daily reports. | Recipient email addresses and the content of those emails. | To be confirmed |
| Flutterwave | Takes card and bank-transfer payments: subscription payments and guests' reservation deposits. | Payer details and payment amounts. | To be confirmed |
| Sentry (when switched on) | Receives error reports so we can fix faults. | Error details. No personal information is attached. | To be confirmed |
Changes
We will update this page when a subprocessor changes, and tell hotels in advance when the change affects personal data. This list is as of the date above; where it says to be confirmed, the arrangement is not final.