DRAFT — Requires Formal Legal Review
This public sub-processor registry discloses third-party infrastructure and service integrations utilized by EstateTrack in accordance with Master Blueprint §19.2 and §19.11.Authorized Third-Party Processors, Infrastructure & Scope Boundaries
EstateTrack partners with industry-leading infrastructure, cloud, and security providers to deliver high availability and cryptographic data isolation. We strictly bound what data is transmitted to outside services: semantic AI receives search text only, and rent payments are recorded between parties without touching payment gateways.
Per Master Blueprint §11.1, EstateTrack never holds, routes, or moves rent money. Payment gateways listed below (Paddle, Safaricom) process our software platform subscription fees only. Rent transactions are conducted directly between tenants and property payees via off-platform banking or mobile money, with EstateTrack recording cryptographically signed claims and settlements.
PostgreSQL database hosting, connection pooling, Row-Level Security policy enforcement, and authentication tokens.
Data Scope: Encrypted user credentials, profile records, property and tenancy data, append-only financial claims and audit logs.
Location: United States & EU (Regional DB clusters)
Next.js application hosting, serverless edge compute, static asset delivery, and DDoS mitigation.
Data Scope: HTTP request headers, client IP addresses, temporary session cookies for request routing.
Location: Global Edge Network (Anycast CDN)
Google OAuth 2.0 social sign-in identity verification.
Data Scope: Google account ID, primary email address, full name, and avatar URL upon user consent.
Location: United States & Global
Map rendering and tile delivery for property vacancy discovery.
Data Scope: Map viewport coordinates and zoom level (no personal user identifiers or tenancy details).
Location: United States & Global
Natural-language search query parsing and conversational property search assistance (Blueprint §1.2).
Data Scope: Search query text only. Personal tenant identities, private invoices, and internal organizational records are strictly excluded.
Location: United States
Card and digital wallet billing for platform subscriptions, tax compliance, and automated invoicing.
Data Scope: Landlord billing name, email, subscription tier, and country. (EstateTrack never touches or stores card numbers).
Location: United Kingdom & Global
M-Pesa STK push processing for platform subscription payments in Kenya (Blueprint §11.14.10).
Data Scope: M-Pesa phone number, subscription amount, and transaction reference for subscription fee settlement.
Location: Kenya
System email delivery (verification, password resets) and browser web push alerts.
Data Scope: Recipient email address, system notification payload, browser push subscription tokens.
Location: United States & EU
© 2026 XILFANX LLC. All rights reserved.