Subprocessors
Last updated
These are the companies SlotPaid uses to run the service that may process personal data, including data providers store about their clients. Each is bound by a contract with data protection terms at least as protective as our Data Processing Addendum.
Current subprocessors
| Company | Purpose | Data | Location |
|---|---|---|---|
| Supabase | Database, authentication, and file storage (e.g. business logos) | All account and booking data | United States |
| Vercel | Application hosting and content delivery | Request data (IP address, browser, pages requested) and data passing through the app | United States (global edge network) |
| Stripe | Card checkout for deposits, packages, and no-show fees — only for providers who connect their own Stripe account | Client name, email, and payment card details (entered directly with Stripe) | United States |
| Polar | Merchant of record for SlotPaid subscriptions: checkout, billing, invoices, and sales tax | Provider name, email, billing address, and payment card details | United States |
| Twilio | SMS appointment reminders and notifications | Recipient phone number and message content | United States |
| Resend | Transactional email (confirmations, reminders, account email) | Recipient email address and message content | United States |
| Google sign-in and Google Calendar sync (only when a provider connects it) | Account email, calendar busy times, and booking events written to the provider's calendar | United States | |
| Microsoft | Outlook calendar sync (only when a provider connects it) | Account email, calendar busy times, and booking events written to the provider's calendar | United States |
Changes to this list
We'll update this page, and email providers on paid plans, at least 30 days before a new subprocessor starts processing client data. To object to a new subprocessor, email privacy@slotpaid.com within that period, as described in the DPA.