This page lists the subprocessors that sharc GmbH ("sharc Travel") engages to deliver the
booking platform at sharc.app and the AI assistant integrations described in
our Privacy Policy. It is intended as a transparent,
machine-readable companion to section 6.2 of that policy.
1. Hosting & Infrastructure
Where the application code, data, and AI integration servers run.
-
Cloudways Ltd. / DigitalOcean, LLC Frankfurt, DE · EU
Web application hosting for the sharc Travel website, booking engine, and operator console.
-
Render Services, Inc. Frankfurt, DE · EU
Hosting for the public Model Context Protocol (MCP) servers that power the ChatGPT and Claude integrations.
-
Cloudflare, Inc. Planned
DNS, CDN, and edge security. When active, will process IP addresses and request metadata only for routing and DDoS protection.
2. Payments
Card processing and fraud prevention. Full card details never reach our servers.
-
Stripe Payments Europe Ltd. Dublin, IE · EU
PCI‑DSS compliant card processing, fraud prevention, refunds, and payout reconciliation. Full card details are handled exclusively by Stripe and never reach our servers.
3. Transactional Email
Booking confirmations, payment notifications, and support replies.
-
Elastic Email s.r.o. Slovakia · EU
Delivery of transactional email. Engaged via our Cloudways hosting integration.
4. AI Assistant Conduits
These providers act only as conduits for messages between the user and our public, read‑only MCP servers. They do not receive booking data, payment data, or guest profiles.
-
OpenAI, L.L.C. United States
Hosts the ChatGPT app surface that calls our MCP server with the search criteria a user expresses in conversation. We do not receive chat history, IP, or assistant identity.
-
Anthropic, PBC United States
Hosts the Claude app surface that calls our MCP server. Same scope as above.
5. Liveaboard Operators
The liveaboard operator running the trip you book is an independent controller, not a subprocessor. Booking and guest‑profile data are shared with the operator so they can prepare your cabin, meals, dive gear, and transfers, and meet local maritime, immigration, and tax obligations. The operator’s own privacy notice governs their handling of that data once received.
6. Notifications & Changes
We will give existing users reasonable advance notice (via email and/or a notice on the Platform) before adding or replacing a subprocessor in a way that materially changes how personal data is handled. The current list always reflects the production stack on the “Last updated” date shown on this page.
7. Contact
For data‑protection questions or to request a copy of the most recent subprocessor list:
sharc GmbH
Am Fischerwinkel 10, 82031 Grünwald, Germany
Email: hello@sharc.app
Last updated: May 21, 2026