Legal
Subprocessors
Effective 2 September 2026
Everyone who can touch data on our behalf. Most are conditional — a store that never switches on waivers has no data at WaiverForever, and a store that never texts has none at a carrier — and saying so is more useful than a list that implies otherwise. This list is checked against the code: a provider the software calls cannot be missing from it.
| Who | What for | What they see | When | Where |
|---|---|---|---|---|
| Supabase, Inc. | Database, authentication and file storage | Everything the product stores | Always | United States |
| Vercel, Inc. | Application hosting, delivery and custom-domain provisioning | Requests in transit; server logs; custom domain names | Always | United States (global edge network) |
| Stripe, Inc. | Subscription billing, and card payments for stores that use it | Billing contact and card details — card numbers never reach us; customer name and email on a saved card | Always for billing; per store for payments | United States |
| Resend, Inc. | Transactional and marketing email, and inbound email relay | Recipient address, message content, delivery and bounce events | When an email is sent | United States |
| Telnyx LLC | Text messages — receipts, booking notices, replies — on the platform's account, and 10DLC registration | Recipient number, message content, the store's business details for carrier registration | Only for stores that switch on SMS (the default carrier) | United States |
| Plivo Inc. | Text messages, for a store that brings its own Plivo account | Recipient number and message content | Only when a store chooses Plivo as its carrier | United States |
| Vonage (Nexmo Inc.) | Text messages, for a store that brings its own Vonage account | Recipient number and message content | Only when a store chooses Vonage as its carrier | United States / European Union |
| WaiverForever (Aviato LLC) | Electronic signature on waivers | Signer name, email and phone, the signed document, and the birth date and address the waiver asks for | Only for stores running the waivers module | United States |
| Intuit Inc. (QuickBooks) | Accounting sync | Sales, refunds, vendor and customer names, as posted to the ledger | Only for stores that connect QuickBooks | United States |
| Digits Financial, Inc. | Accounting sync | Sales, refunds, vendor and customer names, as posted to the ledger | Only for stores that connect Digits | United States |
| Anthropic, PBC | Language models: drafting waivers, event copy, web pages and marketing text; summarising and suggesting replies in the SMS inbox; the review digest; reading uploaded photos and supplier documents; the back-office assistant | The text and images handed to it for the task — which can include SMS transcripts with customer names and numbers, review text with reviewer names, uploaded images, supplier invoices and price lists, and the store data needed to answer a question | When a staff member uses an AI feature, or when the store has switched on inbox assistance or review digests | United States |
| OpenAI, L.L.C. | Language models (the alternative provider for the same features), embeddings for the knowledge base, and image generation | The same categories as Anthropic when chosen as the provider; knowledge-base text for embeddings; prompts and source images for generated pictures | When a store chooses OpenAI as its model provider, uses the assistant's knowledge base, or generates images | United States |
| OpenRouter, Inc. | Routing image and video generation to third-party models | Prompts and source images — property photographs, product photographs — for the map illustrator and the video studio | When a store uses the map illustrator or the video studio | United States (routes to model providers under its own terms) |
| ElevenLabs Inc. | Voice: narration for videos and the phone agent, including cloned voices | The text spoken; voice samples a staff member records for cloning, deleted from our storage once the clone exists | When a store uses narration or the voice agent | United States |
| Google LLC | Business Profile (reviews, hours, posts), Analytics, Google Ads, Drive imports, and sign-in with Google | Review text and reviewer names read from Business Profile; site analytics; campaign settings and spend; files a staff member chooses to import; the email on a Google sign-in | Only for stores that connect a Google account, run ads, or offer sign-in with Google | United States (global) |
| Meta Platforms, Inc. | Advertising campaigns and reporting on Facebook and Instagram | Campaign settings, creatives and spend; no customer lists are uploaded | Only for stores that connect a Meta ad account | United States (global) |
| TikTok (ByteDance Ltd.) | Advertising campaigns and reporting on TikTok | Campaign settings, creatives and spend; no customer lists are uploaded | Only for stores that connect a TikTok ad account | Singapore / United States |
| Apple Inc. | Sign in with Apple, for the customer portal | The email (or Apple relay address) on the sign-in | Only for stores that offer sign-in with Apple | United States |
| Verisign, Inc. (RDAP) | Checking a custom domain's registration and expiry | The domain name only | Only for stores with a custom domain | United States |
We will give 30 days’ notice by email before adding a subprocessor that handles personal data, so a store that objects has time to say so. Payroll is exported as a file for the store’s own payroll provider (Gusto, ADP or another) and is not sent to one by us.
Questions about any of this go to legal@deckpos.com. To see or delete what we hold about you, use Manage my data.