Sub-processors
CrewVisa relies on a small number of trusted service providers (sometimes called “sub-processors”) to run the app. This page lists every one of them, what they do for us, what data they touch, where they operate, and how long they hold the data. We update it whenever we add, remove, or change a provider. This page is referenced by our Privacy Policy and our in-app Data Management page.
HelmWise Pty Ltd is established in South Africa, but the user data CrewVisa processes is stored on infrastructure located in the European Union. The transfers between South Africa, the EU, and (for anonymous analytics only) the United States are covered by the legal mechanisms described in section 4 of our Privacy Policy.
The current list
| Provider | What it does | Personal data it touches | Region | Retention | Transfer mechanism |
|---|---|---|---|---|---|
| Supabase, Inc. supabase.com/privacy | Database, file storage for the documents wallet, authentication, row-level security | Account data, trip data, document files, authentication tokens | European Union (Ireland) | While your account is active, then up to 30 days for backup expiry | Within the EEA — no third-country transfer; GDPR Article 28 Data Processing Addendum in place |
| Resend resend.com/legal/privacy-policy | Outbound transactional email (sign-up verification, password recovery, replies to feedback) | Email address, the content of the message we send to you | European Union | Logged briefly for delivery diagnostics, then deleted | Within the EEA; GDPR Article 28 Data Processing Addendum in place |
| PostHog Inc. posthog.com/privacy | Anonymous product analytics (which screens are viewed, which buttons are tapped) | Anonymous event data only — no name, email, or document content; aggregate device information (operating system, app version) | United States | Up to 12 months from collection | EU–US Data Privacy Framework where applicable, plus the European Commission’s Standard Contractual Clauses |
Optional providers (only when applicable to you)
| Provider | When it applies | What it touches | Region |
|---|---|---|---|
| Apple App Store / Apple Inc. | If you bought CrewVisa Pro on iOS | Subscription status, billing handled entirely by Apple; we never see your card details | Worldwide (Apple infrastructure) |
| Google Play / Google LLC | If you bought CrewVisa Pro on Android | Subscription status, billing handled entirely by Google; we never see your card details | Worldwide (Google infrastructure) |
What we never do
- We do not sell, rent, or lend personal data to anyone.
- We do not share personal data with advertising networks, data brokers, or marketing-attribution companies.
- We do not use personal data to train artificial-intelligence models.
Changes to this list
If we add or remove a sub-processor, we will update this page and notify you in the app or by email at least thirty days in advance, unless we need to act faster for security reasons. The “Last updated” line at the top of this page tells you when the list last changed.
How to object
If you object to a particular sub-processor, email hello@crewvisa.app. The realistic options are: continue using the service with that provider, or delete your account. We will help you export your data first if you want to leave.
Contact
HelmWise Pty Ltd · 12 Hall Road, Cape Town, South Africa 8005 · hello@crewvisa.app