{"controllerStatement":"Omra processes club and member data as a processor on each club's documented instruction. The clubs it serves are the controllers of their member data.","subprocessors":[{"name":"Railway","purpose":"Application hosting, PostgreSQL database, and object storage","dataCategories":["All club and member data processed by the platform"],"location":"United States","transferMechanism":"scc","dpaUrl":"https://railway.com/legal/data-processing-agreement","effectiveFrom":"2026-08-14","status":"active"},{"name":"Stripe","purpose":"Payment processing and payouts","dataCategories":["Customer names and emails","Payment method and transaction data"],"location":"United States","transferMechanism":"dpf","dpaUrl":"https://stripe.com/legal/dpa","effectiveFrom":"2026-08-14","status":"active"},{"name":"Resend","purpose":"Transactional and marketing email delivery","dataCategories":["Recipient names and email addresses","Message content"],"location":"United States","transferMechanism":"dpf","dpaUrl":"https://resend.com/legal/dpa","effectiveFrom":"2026-08-14","status":"active"},{"name":"Expo","purpose":"Mobile push notification delivery","dataCategories":["Device push tokens","Notification content"],"location":"United States","transferMechanism":"scc","dpaUrl":"https://expo.dev/dpa","effectiveFrom":"2026-08-14","status":"active"},{"name":"Anthropic","purpose":"Writes the monthly summaries and the outreach drafts staff review, reached through OpenRouter","dataCategories":["Aggregated club metrics (insight reports)","Member outreach context (agent drafts)"],"location":"United States","transferMechanism":"dpf","dpaUrl":"https://www.anthropic.com/legal/commercial-terms","effectiveFrom":"2026-08-14","status":"active"},{"name":"OpenRouter","purpose":"Routes the outreach drafts and monthly summaries to the model that writes them","dataCategories":["Aggregated club metrics (insight reports)","Member outreach context (agent drafts)"],"location":"United States","transferMechanism":"scc","dpaUrl":"https://openrouter.ai/terms","effectiveFrom":"2026-08-23","status":"active"},{"name":"DocuSeal","purpose":"Runs the signature ceremony for club agreements and issues their audit log","dataCategories":["Signer names and email addresses","Agreement content presented for signature","Signing evidence (consent, timestamps, IP address, user agent)"],"location":"United States","transferMechanism":"scc","dpaUrl":"https://trust.docuseal.com/resources","effectiveFrom":"2026-09-15","status":"announced"},{"name":"Cloudflare","purpose":"Bot protection on the public event-inquiry form","dataCategories":["Visitor IP address","Browser and device signals collected by the challenge widget"],"location":"United States","transferMechanism":"dpf","dpaUrl":"https://www.cloudflare.com/cloudflare-customer-dpa/","effectiveFrom":"2026-08-22","status":"active"}]}