Provider information

Bondora uses the services below to provide its Ohio personal relationship reflection service. The directory was checked on September 10, 2026. Providers can process information in the United States and other countries; this service does not promise that information stays in your state.

• OpenAI API (OpenAI OpCo, LLC): the configured gpt-4o-mini model selects fixed exercises from the situation and question you submit, including your new question for a follow-up. It does not need your payment information, saved report, or separate names and birth profiles. The account uses Global data residency. Optional API input/output, evaluation and feedback sharing were observed disabled. Requests specify store: false; provider security and abuse-monitoring retention can still apply. Zero data retention has not been established. See the OpenAI services agreement and API data controls.
• PayPal: handles the payment authorization, capture, refund and its own fraud or regulatory checks. Bondora receives transaction references, amounts, status, fees where supplied, and relevant payer details. PayPal handles payment credentials under its own privacy statement.
• Vercel Inc.: hosts the website and application, including connection information, security and operational logs. See the Vercel privacy notice.
• Neon: stores application records in PostgreSQL, including private reflection content and separate financial vouchers. The current database has a six-hour point-in-time recovery window. A restricted manual snapshot also exists and has no automatic expiry; it requires operator review and removal when no longer needed. A restore is isolated and checked against the external deletion journal and financial history before any customer traffic is moved. Deleting an active record does not immediately erase every backup. Neon is part of Databricks; see its privacy information.
• Resend (Plus Five Five, Inc.): sends website verification, recovery and request acknowledgements. It receives the destination email address and the necessary message content; private report text is not included in recovery emails. See the Resend privacy policy.
• Namecheap Private Email: hosts real@realnova.world for support and privacy correspondence and human replies. Messages and attachments you send may remain in the mailbox separately from website records and require their own retention review. See Namecheap privacy information and its data-processing terms.

Authorized RNWC personnel can download separate financial records for its confirmed accountant. The export excludes relationship questions, reports, third-party names and private access credentials. An accountant has not been given a public download link or automatic customer-data mailing.

Provider terms describe their respective processing responsibilities; offering a contract or transfer framework does not establish a particular certification, signed safeguard or deletion outcome. Contact RNWC for the arrangements relevant to a specific privacy request, including information originally supplied by another person. Where additional safeguards are required, the affected processing must be reviewed before it proceeds.