Subprocessors
Effective date: 12 June 2026
We use the third-party service providers listed below to deliver Richinei ERP. Each subprocessor has been selected for its security and data-protection posture and is bound by terms substantially equivalent to those in our Data Processing Agreement.
We may update this list from time to time. Material additions or replacements that affect the processing of your Personal Data are notified at least 30 days in advance by email and in-app banner, as set out in our DPA.
Current subprocessors
| Provider | Service provided | Location of processing | Privacy notice |
|---|---|---|---|
| Railway Corp. | Cloud infrastructure, application hosting, managed Postgres | United States | https://railway.app/legal/privacy |
| Anthropic, PBC | AI assistant model (Claude family) | United States | https://www.anthropic.com/legal/privacy |
| OpenAI, L.L.C. | Alternate AI assistant model (GPT family) | United States | https://openai.com/privacy/ |
| Google LLC | Alternate AI assistant model (Gemini family) | United States / Ireland | https://policies.google.com/privacy |
| Resend, Inc. | Transactional email delivery | United States | https://resend.com/legal/privacy-policy |
| Termii Limited | SMS notifications within Nigeria and West Africa | Nigeria | https://termii.com/privacy |
| GitHub, Inc. | Source-code hosting, CI/CD pipelines | United States | https://docs.github.com/en/site-policy/privacy-policies |
Data processed by each subprocessor
- Railway: All Tenant data processed by the Service, including operational records, files, and database contents. Encrypted at rest and in transit.
- AI providers (Anthropic, OpenAI, Google): Only data submitted to the AI assistant. Where the Tenant configures their own API key, AI requests are made under the Tenant's account with that provider. We log token usage but not conversation content.
- Resend: Names, email addresses, and message contents for transactional emails (invoices, receipts, password resets, security alerts).
- Termii: Phone numbers and SMS contents for notifications, transactional messages, and OTPs.
- GitHub: Source code only — no Tenant Customer Data.
International transfers
Where a subprocessor processes Personal Data outside Nigeria or the EEA, transfers are protected by mechanisms set out in Section 6 of our Privacy Policy and Section 6 of our DPA.
Objection procedure
You may object to a new subprocessor on reasonable data-protection grounds within 30 days of our notice. If we cannot agree on a resolution, you may terminate the affected portion of the Service with a prorated refund of any prepaid fees.
To object or to ask questions about subprocessors, contact:
richineitechnologies@gmail.com
Last updated: 12 June 2026