OZ Storage Subprocessors
Version 1.0 · October 25, 2026
The Spanish version is the primary text; this translation is provided for convenience.
These are the providers REPUTATION DYNAMICS LLC uses to deliver OZ Storage to Agencia OZ and its clients, what data they receive, why and where. All accounts are held by the operator. None of them receives data for advertising or to train models. See also the Privacy Policy.
Providers
| Provider | Purpose | Data received | Region |
|---|---|---|---|
| Backblaze, Inc. (B2 Cloud Storage) | Primary ("hot") storage of files, versions, thumbnails and previews; nightly database backups; daily audit log seals | Files and their technical metadata; database backups (accounts, audit log, link events) | United States (US East, us-east-005) |
| Oracle America, Inc. (Oracle Cloud Infrastructure) | Long-term ("cold") archive of finished projects; virtual server that runs automated tasks (backups, previews, migrations, save from a link) | Files; data the tasks need to work | United States (Ashburn, Virginia, us-ashburn-1) |
| Amazon Web Services, Inc. (S3 Glacier Deep Archive) | Vault: immutable backup copy of every file (365-day lock in compliance mode) | Files and their technical metadata | United States (Northern Virginia, us-east-1) |
| Cloudflare, Inc. | Share links (links.ozstorage.app), DNS, bot protection (Turnstile) and external monitoring of the service | Link visits: IP, country, browser; files in transit to whoever downloads them | Global network (each visit is served from the nearest data center) |
| Railway Corporation | Servers for the website, the API and the MCP server; database | Everything in the database (accounts, file metadata, audit log, link events, AI connections). Files do not pass through Railway | United States (region to be confirmed) |
| Resend (Plus Five Five, Inc.) | Email: sign-in links, invitations, notifications and alerts | Recipient's name and email; notification text | United States (to be confirmed) |
| oz-avisos (Agencia OZ's own service) over WhatsApp (Meta Platforms, Inc.) | WhatsApp notifications to people who gave their phone number (alerts, approvals, "your project is ready") | Phone number and notification text (no third-party text) | Own service + WhatsApp infrastructure (global) |
What is not a subprocessor
- The AI you connect (for example, Anthropic or OpenAI): it works for you, not for us. What it reads from OZ Storage is governed by your agreement with that provider. See AI use.
- Apple: passkeys and the Mac and iPhone apps use features of your device and your Apple account; Apple does not receive your files from us.
- Google, Apple and Microsoft as sign-in (“Continue with…”): they authenticate you, with your account and at your request; they return your identifier and email (see privacy § 3.1) and do not receive your files or your organization's data.
- Dropbox: used only, with read-only permission, to bring Agencia OZ's files into OZ Storage during the migration.
Changes
Before adding or changing a provider that receives personal data, we update this list and notify each organization's administrators by email with reasonable notice.
Contact: info@reputationdynamics.io