# OZ Storage Subprocessors

Version 1.0 · October 25, 2026

*The Spanish version is the primary text; this translation is provided for convenience.*

These are the providers REPUTATION DYNAMICS LLC uses to deliver OZ Storage to Agencia OZ and its clients, what data they receive,
why and where. All accounts are held by the operator. None of them receives data for advertising or to train models. See
also the [Privacy Policy](privacidad.en.md).

## Providers

| Provider | Purpose | Data received | Region |
| --- | --- | --- | --- |
| **Backblaze, Inc.** (B2 Cloud Storage) | Primary ("hot") storage of files, versions, thumbnails and previews; nightly database backups; daily audit log seals | Files and their technical metadata; database backups (accounts, audit log, link events) | United States (US East, `us-east-005`) |
| **Oracle America, Inc.** (Oracle Cloud Infrastructure) | Long-term ("cold") archive of finished projects; virtual server that runs automated tasks (backups, previews, migrations, save from a link) | Files; data the tasks need to work | United States (Ashburn, Virginia, `us-ashburn-1`) |
| **Amazon Web Services, Inc.** (S3 Glacier Deep Archive) | Vault: immutable backup copy of every file (365-day lock in *compliance* mode) | Files and their technical metadata | United States (Northern Virginia, `us-east-1`) |
| **Cloudflare, Inc.** | Share links (links.ozstorage.app), DNS, bot protection (Turnstile) and external monitoring of the service | Link visits: IP, country, browser; files in transit to whoever downloads them | Global network (each visit is served from the nearest data center) |
| **Railway Corporation** | Servers for the website, the API and the MCP server; database | Everything in the database (accounts, file metadata, audit log, link events, AI connections). Files do not pass through Railway | United States (region to be confirmed) |
| **Resend** (Plus Five Five, Inc.) | Email: sign-in links, invitations, notifications and alerts | Recipient's name and email; notification text | United States (to be confirmed) |
| **oz-avisos** (Agencia OZ's own service) over **WhatsApp** (Meta Platforms, Inc.) | WhatsApp notifications to people who gave their phone number (alerts, approvals, "your project is ready") | Phone number and notification text (no third-party text) | Own service + WhatsApp infrastructure (global) |

## What is not a subprocessor

- **The AI you connect** (for example, Anthropic or OpenAI): it works for you, not for us. What it reads from
  OZ Storage is governed by your agreement with that provider. See [AI use](ia.en.md).
- **Apple**: passkeys and the Mac and iPhone apps use features of your device and your Apple account; Apple does not
  receive your files from us.
- **Google, Apple and Microsoft as sign-in** (“Continue with…”): they authenticate you, with your account and at your
  request; they return your identifier and email (see [privacy](privacidad.en.md) § 3.1) and do not receive your files or
  your organization's data.
- **Dropbox**: used only, with read-only permission, to bring Agencia OZ's files into OZ Storage during the migration.

## Changes

Before adding or changing a provider that receives personal data, we update this list and notify each organization's
administrators by email with reasonable notice.

Contact: info@reputationdynamics.io