For the SAYRIVO software
These providers process the data of agencies and their customers. They are covered by the Data processing agreement: agencies are told 30 days before any addition or replacement.
Supabase
- Role
- Database, file storage, authentication
- Data processed
- All Service data, uploaded files included
- Location
- European Union (Ireland)
- Identity documents
- Yes: stored
Vercel
- Role
- App hosting, running the server code
- Data processed
- Data in transit on every request; technical logs
- Location
- Global network; server code: outside Morocco
- Identity documents
- Yes: in transit, not stored
Anthropic
- Role
- AI: document reading, photo comparison, assistant, summaries
- Data processed
- Images and text sent by the feature in use
- Location
- United States
- Identity documents
- Yes: when a document is read
OpenAI
- Role
- AI: second provider, used where configured or chosen in the assistant
- Data processed
- Images and text sent by the feature in use
- Location
- United States
- Identity documents
- Yes: when a document is read, where configured
Brevo
- Role
- Sending the app's emails (account access, alerts)
- Data processed
- Name, email address, message content
- Location
- European Union (France)
- Identity documents
- No
Cloudflare (Turnstile)
- Role
- Bot check at sign-up, sign-in and on booking pages
- Data processed
- IP address and technical browser signals
- Location
- Global network
- Identity documents
- No
Apple (iCloud)
- Role
- Daily backup copy, outside the main host
- Data processed
- A copy of every table and every file
- Location
- Outside Morocco
- Identity documents
- Yes: backup copy
For the sayrivo.ma website
These providers receive no data about agencies' customers.
Vercel
- Role
- Site hosting and cookieless audience measurement (Web Analytics)
- Data processed
- Technical logs; aggregated page views
- Location
- Global network
Brevo
- Role
- Delivering “Your question” form messages to our team
- Data processed
- Name, agency, email, phone, message
- Location
- European Union (France)
ImprovMX
- Role
- Forwarding emails sent to contact@sayrivo.ma
- Data processed
- Sender address, message content
- Location
- Outside Morocco
Push notifications
If a user turns on notifications for a device, they travel through that browser's push service (Google, Apple, Mozilla or Microsoft depending on the device). The browser chooses that service, not SAYRIVO. A notification may contain a reservation reference and a customer's name; never an identity document.
Subscription payments
The subscription is paid by bank transfer: no online payment provider is involved.
Changes
This list is updated before any change. Customer agencies are told by email at least 30 days before a provider that processes their customers' data is added or replaced, as the Data processing agreement provides.