Service Providers and Subprocessors

Debelu relies on other services for hosting, authentication, storage, payments, messaging, monitoring and assistance. Information should be shared for the relevant feature and limited to what its purpose requires. The providers involved can differ according to the feature you use.

A provider may act on Debelu’s instructions for some work and under its own legal obligations for other work. This page does not describe every provider as a processor in every transaction; read the Privacy Policy and, where applicable, the Data Processing Addendum.

Supabase supports database, authentication and related storage features. Depending on the feature, relevant data can include account details, session information, store and order records, messages and uploaded files.

Cloudflare supports storefront delivery and product-image storage features. Public listing images are intended to be viewed, while private verification or support material must be handled according to its purpose rather than treated as public product imagery.

Vercel supports website hosting, and Railway supports backend hosting. Hosting can process requests, resources and operational records needed to deliver the service.

Hosting and storage configurations can change, and a global service may involve more than one location. Ask about the processing relevant to your feature instead of assuming a named provider keeps every record in one country.

Paystack supports payment-related integration. It can receive the transaction and payment information needed to process the payment and return references and outcomes used by the order or wallet flow.

Payment providers can have independent verification, anti-fraud, recordkeeping and legal obligations. Debelu’s vault and refund process does not mean that every provider action is performed only under a seller’s instructions. Do not send card or bank authentication credentials through Debelu messages.

Google Gemini supports AI assistance, including Nduzi-related features and assistance preparing a support response. Relevant requests or conversation context can be processed for that task; avoid unnecessary sensitive information.

Meta WhatsApp supports WhatsApp messaging features where used. Recipient and conversation information are relevant to that channel. Where an SMS feature uses Termii, the recipient and message information are needed for that delivery. An available integration does not guarantee that a particular notification was delivered.

Sentry supports error monitoring and operational alerts. Relevant technical events help diagnose failures. Monitoring is distinct from a public endorsement, security certification or promise that an incident cannot happen.

The amount of information in an error report should be minimized, and secrets or unrelated personal information should not be included deliberately. Report a concern about an exposed record to security@debelu.com.

Processing location, retention and contractual protections depend on the relevant service and its configuration. International processing must meet applicable Nigerian data-protection requirements. Ask about the location and safeguards relevant to your feature if you need that information.

For information about a particular data flow, contact privacy@debelu.com with the feature and your question. Business processor arrangements and any contractual provider-change or objection procedure can be discussed at legal@debelu.com. Material changes should be reflected in the appropriate notice and communicated as required by law or an applicable agreement.