Subprocessors
Last updated August 19, 2026
A subprocessor is a third party that processes your club’s data on Zeil’s behalf. This page is the list referred to in Annex 3 of the Data Processing Addendum, and it is the authoritative list. It is kept in step with Section 4 of the Privacy Policy, which describes the same relationships from a member’s point of view.
Where your data lives. All Service data is hosted in Canada, in OVH’s Montreal region. Zeil itself is a US-operated business. The subprocessors below receive only what their function requires, described in each row.
Notice of changes. Under DPA Section 6.2, Zeil gives clubs at least 30 days’ advance notice before a new subprocessor begins processing personal data, by email to club administrators or by updating this page, or both. A club that reasonably objects on data-protection grounds within the notice period can raise it under DPA Section 6.3, and if Zeil cannot accommodate the objection the club may terminate the affected services and receive a pro-rata refund of prepaid unused fees.
Subprocessors
| Subprocessor | What it does, and what it receives | Location |
|---|---|---|
| OVH SAS | Cloud infrastructure hosting, database, and backups. All Service data is held here. | Canada (Montreal region) |
| Anthropic, PBC | AI generation of Sail Briefs. Receives the reservation window, the boat’s name, class and length, the weather and tide forecast, sunset time, the lead skipper’s name, the number of crew aboard, and any local notes your club’s administrators have written. Crew members’ names, emails, and credential details are not sent. Anthropic does not train on data submitted through its API under its commercial terms. | United States |
| Resend, Inc. | Transactional email delivery. Receives recipient addresses and full message content, which can include names, reservation details, crew-chat excerpts, and one-time sign-in links, plus contact-form submissions from the marketing site. | United States |
| Stripe, Inc. | Payment processing, in two distinct roles. For your club’s subscription to Zeil, Stripe is Zeil’s processor and hosts the checkout and billing-portal pages; it receives the club name, the billing contact email, and the plan and subscription records. For money a club collects from its own members and guests, the club is the merchant of record on its own Stripe account and Stripe is the club’s processor rather than Zeil’s; it receives the payment amount and description, the payer’s email, and the card or bank details the payer enters. Card and bank details are entered on Stripe’s own pages and never reach Zeil’s servers. | United States |
| Functional Software, Inc. (Sentry) | Application error reporting, where enabled. Names and emails are not attached to error reports and session replay is disabled. Reports can include technical context such as the page involved, internal record identifiers, and, at the transport level, an IP address. | United States |
| Open-Meteo | Weather and tide forecasts. Receives only your club’s approximate geographic coordinates and a date range. No names, emails, or user identifiers. | Switzerland |
Third parties that are not subprocessors
The Privacy Policy also names these three. None of them processes club data on Zeil’s behalf, so none is a subprocessor under the DPA. They are listed here so the picture is complete.
| Third party | Why it is not a subprocessor | Location |
|---|---|---|
| Apple Inc. | Sign in with Apple, where enabled. Apple sends Zeil your name and email at your direction when you use it. Zeil does not send club data to Apple. | United States |
| OpenStreetMap Foundation | Maps. Address searches by club admins go through Zeil’s server; map images on pages such as guest invitations load tiles directly in your browser, so OpenStreetMap receives your IP address and the map area shown. | United Kingdom |
| Cal.com, Inc. | The demo-booking widget on the Contact page of this marketing site. It loads directly in your browser and may set its own cookies. If you book a time, the name, email, and notes you enter go to Cal.com, not through Zeil’s servers. No club data is involved. | United States |
What Zeil does not do
Zeil does not sell personal information and does not share it for cross-context behavioral advertising. There are no advertising trackers in the product, and no data broker or advertiser appears on either list above.
Questions
Email hello@zeilapp.com with the subject “Subprocessors”. Clubs that want a countersigned Data Processing Addendum can ask for one at the same address.