Sub-processors
Last updated: July 27, 2026
Chewie uses the following third-party service providers (“sub-processors”) to operate its platform. Each is bound by contractual confidentiality and data-protection terms. We’ll update this list and notify customers under contract before adding a new sub-processor that materially changes how their data is handled.
The data minimization principles in our Privacy Policy apply across all sub-processors: API queries are not retained after response, query content is never used to train our models, and personal data is collected only where necessary to operate the service.
Current sub-processors
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase | Authentication, user profiles, application database | Account profile (name, email, provider id), facility membership, signed attestations | United States (AWS us-east) |
| Paystack | Payment processing for paid plans | Billing email, transaction metadata. Card data is processed by Paystack and never reaches our servers. | Nigeria, South Africa, Kenya, Ghana |
| Railway | Hosting for the API, inference services, and developer console | Application logs, request metadata, static assets | United States |
| Upstash | Rate limiting and ephemeral key-value storage (Redis) | Hashed API key identifiers, request counters (TTL-bound) | United States / Europe |
| PostHog | Product analytics, session replay, and error monitoring | Staff account identifiers, masked session recordings, stack traces, sanitized request metadata | United States / European Union |
International transfers
Several sub-processors operate from outside Africa. Where personal data of African users is transferred internationally, we rely on the standard safeguards permitted by Nigeria’s NDPR, Kenya’s DPA, South Africa’s POPIA, and the EU GDPR (where applicable), including Standard Contractual Clauses with the receiving party.
Questions or objections
If you are a customer under contract and would like to raise an objection to a specific sub-processor, contact us at [email protected].