Subprocessors
Effective 30 September 2026 · Last updated 30 September 2026
Besides the OTAs you connect yourself, Amara uses a number of third-party providers to run the service. This page lists their categories, what they do, what data they receive, and in which country that data is processed.
1. Provider List
- Provider category
- Midtrans (PT Midtrans)
- Purpose
- Processing your subscription payments to Amara, as a third-party payment gateway provider.
- Data received
- Payer name, contact, and transaction data. Bank account details and payment credentials are handled by the provider and never stored by Amara.
- Processing country
- Indonesia, and may be processed outside Indonesia by the provider's personnel
- Provider category
- DigitalOcean
- Purpose
- Running the Amara application and storing the service database.
- Data received
- All service data.
- Processing country
- Singapore
- Provider category
- Amazon Web Services
- Purpose
- Storing service files and data backups.
- Data received
- Service files and backups of all service data.
- Processing country
- Singapore
- Provider category
- Transactional email provider
- Purpose
- Sending service emails, such as notifications and invoices, and product updates.
- Data received
- Recipient name and email address, email content.
- Processing country
- United States
- Provider category
- OTA integration infrastructure provider
- Purpose
- Providing the infrastructure for exchanging rate, availability, and reservation data between Amara and the OTAs you connect.
- Data received
- Villa and room data, rates, availability, reservation and guest data.
- Processing country
- European Union
- Provider category
- WhatsApp Business Platform (Meta)
- Purpose
- Sending verification codes and reservation notifications, handling Amara Customer Care, and sending product updates if you consent.
- Data received
- WhatsApp number, name, message content (reservation details and Customer Care conversations).
- Processing country
- United States and other countries where Meta operates
- Provider category
- Google Maps Platform (Google)
- Purpose
- Completing the villa's address and location through place search, and showing a map to pick the location.
- Data received
- Search input and villa location.
- Processing country
- United States and other countries where Google operates
- Provider category
- Website hosting provider
- Purpose
- Serving the Amara website to visitors.
- Data received
- IP address, device and browser type, and pages visited.
- Processing country
- United States and other countries where the provider operates
- Provider category
- Business email provider
- Purpose
- Receiving and replying to your emails, including questions, support, and personal data requests.
- Data received
- Name, email address, and the content of the correspondence.
- Processing country
- United States and other countries where the provider operates
2. Applicable Terms
Providers that run Amara's core service are bound by confidentiality and data protection obligations and may only use the data for the stated purpose. For business email, we share only the data needed to handle your question or request.
Use of Google Maps Platform is also subject to Google's Privacy Policy (policies.google.com/privacy), and use of WhatsApp is subject to Meta's applicable policies.
A list of provider names is available to account holders on request at amara.privacy@nullmarks.com.
3. Changes to This List
We update this page whenever a provider is added or replaced, and the date at the top of the page is updated with it. If a change means data is processed in a country not yet listed, or adds a new provider category, we will notify you by email before the change takes effect.
This is an English translation; if it differs from the Bahasa Indonesia version, the Bahasa Indonesia version prevails. Full details of how we process data are in our Privacy Policy.