Sub-processors.
Last updated: 2026-07-06
Domos (operated by SELVAGEN DESIGN E ARQUITETURA LTDA, Brazilian CNPJ No. 31.104.552/0001-73) uses the sub-processors listed below to operate the service. Each sub-processor receives personal data strictly to the extent necessary for the purpose described, under legal safeguards for international transfers where applicable.
This page is updated whenever there is a material change to the list. Substantial changes are also notified to users by email and by platform notice.
| Sub-processor | Purpose | Data processed | Location | Safeguards |
|---|---|---|---|---|
| Supabase, Inc. | Relational database and authentication | Email, name, avatar, language, projects, project parameters, subscription history | Brazil (São Paulo, sa-east-1) | SOC 2 Type II, encryption at rest, RLS |
| Stripe, Inc. | Payment processing | Email, name, transaction data, last 4 digits of card | United States | SCC, PCI DSS Level 1, SOC 2, ISO 27001 |
| Vercel, Inc. | Application hosting and delivery | IP address, user-agent, timestamps, technical logs | United States / global (edge) | SCC, SOC 2 Type II |
| Resend (Plus Five Five, Inc.) | Sending operational communications (signup confirmation, invoices, notices) | Email, name | United States | SCC, SOC 2 |
Legal basis for international transfers
For applicable international transfers we rely on:
- Standard Contractual Clauses (SCC) approved by the European Commission.
- Transfer Impact Assessment (TIA) where the transfer involves EU/UK data subjects, following the Schrems II ruling (C-311/18).
- International certifications of the operators (SOC 2 Type II, ISO 27001, PCI DSS as applicable).
- Additional technical safeguards: encryption in transit (TLS 1.2+), encryption at rest, access control via Row Level Security, and principle of least privilege.
How you are notified
Substantial changes to this list (adding a new sub-processor, change of purpose, change of location) are communicated with at least 30 days notice by registered email and platform notice, giving you the option to close your account before the change takes effect, with pro-rata refund of paid but unused periods.
Contact
Questions or requests about sub-processors and data protection: privacidade@selvagen.com
Data Protection Officer (LGPD art. 41): Paulo Roberto Dutra Carvalho, Founder of SELVAGEN.