Service providers and data transfers
Current service status: paid subscriptions, billing, trial activation, referral credits and Email/SMS delivery are not yet active. The provisions about them apply when those services are offered and activated; they do not authorise a purchase or charge. Your statutory rights remain protected.
1. Purpose of this list
This page supplements TaharaSmart's Privacy Policy and identifies parties involved in processing information. The operator and controller is יהלום זקס. For further information, contact contact@taharasmart.com.
Not every provider receives the same information. A payment or messaging provider does not need the entire calendar. Database technology does not itself identify a hosting company; the details below concern actual contractual arrangements and processing.
2. Providers and processing roles
Google — authentication. Basic account details and technical sign-in information. Google may also act as an independent controller for its services. Ordinary sign-in does not authorise access to Gmail, Drive or Calendar.
Vercel — hosting and service execution. Network requests, technical information and content transmitted or processed in the application according to the user’s actions.
MongoDB Atlas — database. Account, calendar, settings and operational records stored in the database.
Nominatim / OpenStreetMap — location lookup requested by the user. Coordinates and technical request information used to determine a city and country. Account or calendar details are not intentionally added to the location request.
3. Limited access and international transfers
Providers acting as processors on our behalf must follow appropriate contractual instructions, security and confidentiality requirements and limit use to the specified purpose. A provider acting also to fulfil independent obligations will be identified according to that role, without promises inconsistent with those obligations.
Transfers out of Israel, the European Economic Area or the United Kingdom will use an appropriate lawful mechanism for each transfer. An adequacy decision for one country is not blanket approval for onward transfer from it to any other provider. You may request details and a copy or summary of the applicable safeguards, subject to limiting information unnecessary for exercising the right.
4. Changes to the list
We will update this list when relevant changes occur. Adding a provider for an existing purpose does not authorise new processing inconsistent with the Privacy Policy. Material changes to the purpose, data category or conditions of sensitive processing will be accompanied by disclosure and consent where required. Use of a subprocessor does not diminish users' rights.