Vendor / Subprocessor Register

This register lists the current vendors, processors, and subprocessors used by the Zarova website and related operational workflows. A listing does not by itself define a provider's legal role; that depends on the service and processing described below.

Zarova does not add services to this page unless they are used in the product or business workflow. Public social platforms linked from the website are not listed solely because Zarova links to them. Embedded third-party services may be listed when the website makes requests to them, without implying that every listed provider acts as Zarova's processor.

Service Category: Authentication, database, storage, and backend application services.

Purpose: Authentication, user accounts, profiles, roles, dashboards, database records, Supabase Storage, profile avatars, application files, CMS media, legal acceptance records, and related backend workflows.

Data processed: Account identifiers, email addresses, authentication/session data, profile fields, legal acceptance records, application data, uploaded files, profile avatars, CMS records, storage object metadata, and operational logs needed to provide and secure the service.

Primary Processing Region:Supabase is a United States-based provider. Zarova data is stored in the Supabase project region selected for the project, with provider operations and subprocessors potentially operating internationally according to Supabase's published terms.

Service Category: Hosting, edge delivery, Website Analytics, and performance monitoring.

Purpose: Website hosting, deployments, edge delivery, server-rendered pages, route handling, performance monitoring, consent-gated Vercel Analytics, and Speed Insights.

Data processed: Website request metadata, IP-derived location signals, browser and device information, page and route performance data, deployment logs, error signals, and analytics events where analytics consent has been granted.

Primary Processing Region: Vercel is a United States-based provider and operates a global hosting and edge network. Processing may occur in the United States and other regions used to deliver and secure the website.

Service Category: External video hosting and embedded media.

Purpose: The Cortex demo requests its preview image from i.ytimg.com before activation. Only after a visitor chooses to play the video does the site load the embedded player from youtube-nocookie.com. Visitors may instead open the video directly on YouTube.

Data processed:The preview-image request may expose technical request data to YouTube infrastructure before player activation. After activation, YouTube or Google may receive technical and interaction data and may use cookies, local storage, or similar technologies under YouTube's own privacy terms.

Zarova has not listed payment processors, email marketing platforms, enterprise support tools, or advertising vendors here because they are not part of the current website implementation described by the live codebase.

If Zarova later adds additional processors, such as a transactional email service, payment processor, support desk, or production logging platform, this register should be updated before or alongside that launch.

This register may be updated as Zarova's infrastructure changes. Material processor changes should be reviewed against the Privacy Policy, Cookie Policy, Data Retention Policy, and internal incident response procedures.