Diving.Software Legal
Subprocessors and Service Providers
The providers used to host, secure, support and operate Diving.Software.
1. About this list
This list identifies providers currently evidenced in the Diving.Software codebase or deployment model. Webase Global uses them to provide, secure, support and measure the service. A provider may act as a processor, subprocessor or independent controller depending on the service and applicable terms.
This published schedule identifies the providers evidenced in the current Diving.Software codebase and deployment model. Credentials and secret values are never published.
2. Current providers
| Provider | Purpose | Typical data | Use in Diving.Software |
|---|---|---|---|
| Stripe | Subscription billing, Connect onboarding, payments, fraud, payouts, refunds and disputes | Business identity, account, booking/payment and device data | Required only when the relevant billing or payment feature is used |
| Railway | Application and database hosting | Account, organization, customer, booking, operational and log data | Core hosting provider |
| SiteGround / configured mail relay | Transactional and operational email delivery | Recipient, message and delivery metadata | Email delivery provider |
| Google reCAPTCHA | Abuse prevention on protected public forms | Device, network and interaction signals | Used where a protected form is enabled |
| Google Analytics | Consented product and public-site measurement | Page, event, device and analytics identifiers | Optional; enabled only when configured and permitted |
| Esri | Map tiles on location-management surfaces | IP address, device request and map interaction | Used when an authorized user opens the relevant map |
| OpenStreetMap contributors / Nominatim | Geographic map data and geocoding | Search text, IP address and map request data where sent directly | Used for map data, selected reports and geocoding |
3. Diving.Voyage integration
Diving.Voyage is another product operated by Webase Global with a separate application, database and credentials. It is not treated as an unrelated vendor. The products exchange only authenticated, purpose-limited data through explicit server-to-server APIs.
Diving.Software owns organization-scoped customer, booking, payment and operational records. Diving.Voyage owns diver accounts, profiles and preferences. A booking sends the selected Operator only the data reasonably required to create and perform that booking. Optional future profile synchronization remains a separate choice.
4. International transfers
Some providers may process data outside Ireland or the European Economic Area. Where restricted-transfer rules apply, Webase Global uses an adequacy decision, the current Standard Contractual Clauses or another lawful safeguard, together with supplementary measures where required.
5. Changes and objections
Webase Global will keep this list current and give advance notice of material new subprocessors where required by the Data Processing Addendum or applicable law. A business customer may submit a documented data-protection objection through the legal contact during the stated notice period.
No optional analytics, support, monitoring, artificial-intelligence or marketing provider may receive production personal data until its role, purpose, data categories, contract and transfer position have been reviewed and added to the applicable schedule.