To provide the service, Viaondo works with the providers on this list. Except for OpenStreetMap, explained below, they all process personal data on our behalf. When we process clients’ and travelers’ data on behalf of an agency, these providers are sub-processors under the data processing agreement. Each of them is bound by contract to protect the data with safeguards equivalent to those in that agreement.
Providers and data location
| Provider | Service | Data location | Safeguards or notes |
|---|---|---|---|
| Cloudflare | Database (D1) and private file storage (R2), with an access service on Cloudflare Workers | European Union | Database and files under EU jurisdiction |
| Resend | Email delivery: account access, invitations and notices to travelers | European Union (Ireland) | Resend’s EU region |
| NaN (nan.builders) | AI extraction of booking data from the documents the agency uploads, which the agency reviews before using it | [[OWNER: confirmar ubicación y conservación de NaN]] | Only receives the documents the agency chooses to import |
| Server provider (VPS) | Server that runs the application, managed with Coolify | [[OWNER: proveedor y ubicación del VPS]] | Handles requests from the website, the dashboard and the traveler app |
| OpenStreetMap Foundation | Street map tiles in the traveler app and in the dashboard’s places map | United Kingdom (seat of the foundation) | Not a sub-processor: the device connects directly to its servers, which receive its IP address |
About OpenStreetMap
The street map loads from the OpenStreetMap Foundation’s tile servers. When a traveler opens the map in the app, or an agency user uses the places map in the dashboard, their device connects directly to those servers, which receive its IP address and the map areas being loaded.
It is not a sub-processor, because it does not process data on Viaondo’s behalf: it is an external service that the device itself connects to, and it processes that data under its own privacy policy. Thanks to the no-referrer policy, it does not receive the trip link. The rest of the traveler app works without this service.
Services travelers choose
If a traveler opens an address in their maps app or contacts their agency by WhatsApp or email from the app, they do so by their own choice. Those services are not Viaondo’s sub-processors and process the data under their own terms.
How we announce changes
Before adding or replacing a sub-processor, we will update this page and notify the owners of agency accounts by email at least 30 days in advance. During that period, the agency may object on reasonable grounds relating to data protection, as provided for in the data processing agreement. The date of the last update is shown on this page.