1. Active website infrastructure
- OpenAI / ChatGPT Sites: application hosting, publication, and site-management infrastructure.
- Cloudflare: delivery, security, serverless execution, and D1 database infrastructure used by the application.
- Hostinger: domain and DNS administration; email services apply only to mailboxes that the owner activates.
2. First-party data uses
MERHI ONE stores newsletter choices, contact and privacy requests, consent records, and consented audience events in its application database. Analytics is first-party and excludes names, email addresses, phone numbers, and medical information.
3. Planned, not active
- Brevo is the planned newsletter-delivery provider but is not yet connected; subscriber sync remains pending until configuration.
- No payment processor, merchant of record, checkout, SMS, or WhatsApp provider has been selected or activated.
- A future provider will be added here, to the Privacy Notice, and to checkout disclosures before it receives production data.
4. Selection and safeguards
Providers receive only data reasonably needed for their role and must be assessed for security, confidentiality, location, retention, deletion, subprocessing, incident response, and applicable international-transfer mechanisms. MERHI ONE remains responsible for explaining its own purposes and honoring applicable rights.
5. International processing and changes
Infrastructure may process data outside the reader’s state or country. Applicable transfer safeguards and contractual mechanisms will be documented as the commercial stack is finalized. Material provider changes will update this page and the Privacy Notice.
Official sources
