Trust & Compliance
Sub-Processors
Last updated: 2026-05-07
BoothZen engages a small set of vetted third-party service providers (“Sub-Processors”) to help us deliver the Service. Each Sub-Processor is bound by a written contract that obliges them to handle personal data only on our documented instructions and to apply appropriate security measures. This page lists every Sub-Processor we currently use.
30-Day Advance Notice
We will notify operators at least 30 days in advance of adding or replacing any Sub-Processor. Notifications are delivered both by email (to subscribers of this page) and via a banner on the operator dashboard, giving operators a fair opportunity to review and object before the change takes effect.
Current Sub-Processors
| Vendor | Purpose | Data | Region |
|---|---|---|---|
| Stripe | Payment processing (subscription billing + booking deposits) | Cardholder data (tokenized), customer email | US/EU |
| Mollie | Alternative payment processing | Cardholder data (tokenized), customer email | EU |
| PayPal | Alternative payment processing | Customer email | US/EU |
| Twilio | Outbound SMS (transactional) + inbound SMS handling | Customer phone, message content | US |
| SendGrid (Twilio) | Transactional email delivery | Customer email, message content | US |
| Anthropic | AI Assistant (Charlie) + Website Scanner | Operator question text, anonymized booking metadata | US |
| Google Maps | Geocoding fallback for venue addresses | Venue address strings | US |
| OpenStreetMap (Nominatim) | Geocoding primary | Venue address strings | EU |
| Cloudflare | CDN + DDoS protection | Request metadata, IP, headers | Global |
| Backblaze B2 | (planned) Off-host backups | Encrypted DB + file backups | US |
| GitHub | Source-code repository (codebase only; operator data not stored here) | Source code only | US |
| QuickBooks Online | (operator-opt-in) Accounting sync | Booking metadata, invoice data | US |
| Xero | (operator-opt-in) Accounting sync | Booking metadata, invoice data | NZ/EU |
| Webklex IMAP (npm package) | Inbound email polling | Email content, headers | n/a (library) |
Sub-processor list last updated: 2026-05-07.
Subscribe to changes
Get notified by email whenever we add, remove or replace a Sub-Processor. You'll receive at least 30 days' advance notice before any change takes effect.
We'll only use this email to send Sub-Processor change notifications. You can unsubscribe at any time.