Who touches visitor data — and why.
The list is intentionally short: hosting, a database and private file storage, and optional transactional email. No CRM, no analytics vendor, no marketing/ad platform.
Three services. That's the whole list.
Pilot requests, animal records, and uploaded source material are stored in a real database and private file storage — not forwarded to a third-party CRM or form processor, and not used for advertising or analytics. This list will be updated before any new service is added.
- VercelRoleHosting & edge networkWhat it doesWeb application hosting and edge delivery for the marketing site and the shelter application. May retain standard short-lived server access logs per Vercel's own policies.LocationGlobal edge network
- SupabaseRoleDatabase & private file storageWhat it doesHosts the Postgres database (organizations, animal records, applicants, holds, foster notes, pilot requests) and private object storage for uploaded source material (intake photos, medical documents). Storage is not publicly accessible — every download uses a short-lived signed link.LocationRegion selected at deployment
- ResendRoleTransactional email (optional)What it doesSends pilot-request notifications, password-reset links, and team-invitation emails when configured. If not configured, these events still persist in the database and remain visible in the app — nothing is silently dropped.LocationUnited States
There is no CRM, no marketing automation platform, no third-party analytics or advertising service, and no data broker in this stack. A direct email to cazar-brandes@outlook.com goes to a standard inbox, governed by that provider's own policies — not through any of the above. When new services are added, this page will be updated before they go live.
Questions about our infrastructure?
If you need specifics about where data is stored or how it is protected, get in touch.