Sub-processors

1. Infomaniak Network SA, Geneva

Purpose: hosting of the platform and of all host websites, storage of the data (bookings, accounts, listings) and of the encrypted backups.

Country: Switzerland. Hosting and backups are located in data centres in Switzerland.

Transfer basis: none required, the data does not leave Switzerland.

2. Stripe

Purpose: payment processing (guest payments, payouts to hosts, refunds, chargebacks) and identity verification of hosts as part of Express onboarding. The booking reference, amount, currency, e-mail address and payment status are transmitted; card and bank details are collected directly by Stripe and never reach our servers.

Country: the contracting party for Swiss accounts is Stripe Payments Europe, Ltd., Dublin (Ireland); data is processed in the EEA and by Stripe, Inc. in the USA.

Transfer basis: Stripe's data processing agreement with standard data protection clauses; according to its own statements, Stripe, Inc. is certified under the Data Privacy Framework, including the extension for Switzerland.

3. Resend

Purpose: sending all e-mails of the platform (booking confirmations, access links, arrival information, notices to hosts) and feedback on delivery, non-delivery and spam reports. Resend retains the content of sent e-mails for around 30 days.

Country: Resend, Inc., USA. Processing takes place in the USA.

Transfer basis: Resend's data processing agreement with standard data protection clauses.

4. Google (Google Analytics 4)

Purpose: visitor statistics, exclusively after express consent via the cookie banner. Without consent, no analytics script is loaded; personal payment links and guest portals never load it. IP addresses are truncated. Consent can be withdrawn at any time via the “Cookie settings” link in the footer.

Country: Google Ireland Limited, Dublin (Ireland), with processing by Google LLC in the USA.

Transfer basis: Google's data processing terms with standard data protection clauses; according to its own statements, Google LLC is certified under the Data Privacy Framework, including the extension for Switzerland.

5. Anthropic

Purpose: language model for content functions that the host triggers personally (translation of listing texts and of the texts of the arrival information, image descriptions, notes on listing quality), for the automatic translation of published guest reviews, for the automated checking of listing texts for violations and for the weekly analysis of our own technical operating logs for clusters of errors. The host's listing texts, arrival texts and images are transmitted, and of published reviews only the text and the host's reply, without names, booking details or ratings. From the operating logs only pseudonymised technical data is transmitted (counts, timestamps, event types, page paths, status and error codes); names, email addresses, subject lines and the wording of messages are not transmitted, and identifiers of hosts and bookings are first replaced by pseudonyms that only we can resolve. No payment, account, contact or contract data. Automated checks only generate notes; decisions are made by humans.

Country: Anthropic, PBC, USA.

Transfer basis: business API access with a data processing addendum and standard data protection clauses. The contractual terms exclude the use of the transmitted content for training general models.

6. Have I Been Pwned

Purpose: checking new passwords against known data breaches. Only the first five characters of a hash value (SHA-1) of the password are transmitted; the password itself does not leave our server and cannot be reconstructed from this fragment. Neither the e-mail address nor the account is sent along.

Country: Superlative Enterprises Pty Ltd, Australia; delivery via Cloudflare (worldwide).

Transfer basis: none required. Only a fragment of the hash value is transmitted, which cannot be attributed to any person. No personal data within the meaning of the Federal Act on Data Protection (FADP, DSG) is therefore involved.

7. trigger.dev

Purpose: scheduling of background jobs (calendar synchronisation, backup, listing checks, system monitoring). The service issues the start signal and receives the feedback from the run: status, counters, error messages and identifiers of tenants and listings. Guest, payment and account data is not transmitted.

Country: Trigger.dev, Inc., USA.

Transfer basis: the provider's terms of use and data processing agreement with standard data protection clauses.

8. Google Maps Platform

Purpose: map showing the accommodation in the catalogue and location map on the property pages. Both maps are only loaded when you expressly request them; before that, no request is sent to Google. When a map is loaded, Google receives your IP address, technical information about your browser and the map section displayed. The pins in the catalogue show the area of an accommodation, not its address.

Country: the contracting party is Google Cloud EMEA Limited, Dublin (Ireland); data is also processed by Google LLC in the USA.

Transfer basis: Google Maps Platform's data protection terms with standard data protection clauses; according to its own statements, Google LLC is certified under the Data Privacy Framework, including the extension for Switzerland.

Changes and questions

If a service provider is added or replaced, this list is updated beforehand and registered hosts are notified by e-mail. The version at the bottom of the page shows when the list was last reviewed. We answer questions about it at .