Subprocessors | Ovation OS™

Ovation Entertainment Solutions, LLC ("Company," "we," "us," or "our") engages the third-party subprocessors listed below to help us provide Ovation OS and our related services (collectively, the "Services"). Each subprocessor is bound by data-protection obligations consistent with our commitments to you.

This page supplements our Privacy Policy and Data Processing Agreement. Terms used but not defined here have the meaning given in those documents.

1. Current Subprocessors

We engage the following subprocessors to process personal data in connection with the Services. Each entry lists the name, the purpose of processing, and the location of processing.

1.1 Infrastructure and Hosting

Supabase — database, authentication, and file storage — United States
Google Cloud Platform — application hosting and messaging — United States
Vercel — frontend hosting and content delivery — United States

1.2 Payments and Communications

Stripe — payment processing — United States
Resend — transactional and inbound email — United States
Svix — outbound webhook delivery — United States
Expo — mobile push notifications — United States

1.3 AI and Search

Anthropic — AI assistant features — United States
Google — AI features (Gemini) — United States
OpenAI — text embeddings and semantic search — United States

1.4 Analytics and Monitoring

Better Stack — error monitoring and log management — United States
PostHog — product analytics, session recording, error tracking, application logs, and AI-feature performance metrics — United States

PostHog receives usage events from our marketing, documentation, sign-in, and application domains, from any custom or client-portal domain a customer configures, and from our servers and our mobile application. It also receives session recordings of browser sessions in the Services; session recording is off by default in our mobile application. Those records include IP addresses, device and browser details, the pages and features used, and — once a user signs in — that user's identifier, name, email address, organization, and workspace. Session recordings reproduce on-screen content, which can include business data; values typed into form fields are masked. For AI features, PostHog receives performance metadata (model, token counts, cost, latency, and errors) but not the text of prompts or responses. Session recordings are deleted after 30 days; usage events are retained for up to 84 months.

1.5 Geolocation

Radar — address geocoding and geofencing — United States

1.6 Feature-Specific Subprocessors

The following subprocessors are engaged only when a customer enables the relevant feature:

backgroundchecks.com / ClearChecks — background screening (only when a check is initiated) — United States
Remote.com — payroll (only when payroll features are enabled) — United States
Google Drive and Microsoft OneDrive — connected cloud storage (only when a customer connects them) — United States
PassSlot — mobile wallet passes — United States

2. Electronic Signatures

Our electronic-signature capability (OvationSign) runs on our own infrastructure (the hosting providers listed above), so signer data is not shared with a separate signing vendor.

3. No Advertising Vendors

We do not use third-party advertising networks, advertising cookies, or cross-site behavioral tracking, and we do not sell or share personal data for advertising purposes. We do use the third-party product-analytics provider listed in Section 1.4, which processes data only on our behalf and only to help us operate, secure, support, and improve the Services.

4. Changes to Subprocessors

We may update this list from time to time. We will provide notice of new subprocessors (for example, by updating this page and/or notifying customers) so that customers may exercise any objection rights under the Data Processing Agreement.

5. Contact Us

If you have questions about our subprocessors, please contact us:

Ovation Entertainment Solutions, LLC

Email: privacy@ovation-os.com

Website: https://ovation-os.com

Application: ovation-os.com

For data-protection inquiries, you may also contact our Data Protection Officer at dpo@ovation-os.com.