Draft for legal review. This text hasn't been approved by a lawyer yet and may change before launch.
Last updated: September 26, 2026 · Version 2026-09
עבריתSubprocessors
Bookfront uses the companies below to run the service. Each one handles personal information only to provide its service to us, under written data protection terms. Providers marked “Not in use yet” are listed in advance; they start handling data when that feature is switched on in your country.
1. Current list
Vercel Inc. (USA)
In use- What it does
- Hosts the website, the Bookfront app and the booking pages, and runs our server code.
- Personal information
- Everything that passes through a page request: account and business details, bookings, clients' names and contact details, plus IP addresses and browser details in short-lived request logs.
- Where
- Server code runs in Frankfurt, Germany. Static files and request routing use Vercel's global edge network.
Supabase, Inc. (USA)
In use- What it does
- Database, sign-in and file storage.
- Personal information
- All stored data: accounts, business profiles, team members, clients, appointments, uploaded photos and logos, and sign-in records (time, IP address, browser).
- Where
- Frankfurt, Germany (EU).
Resend
Not in use yet- What it does
- Sends email: sign-in codes, booking confirmations and reminders to clients, and booking alerts to businesses.
- Personal information
- Recipient email address, message content (names and appointment details) and delivery status.
- Where
- United States.
Twilio Inc. (USA)
Not in use yet- What it does
- Sends text messages to US phone numbers and receives STOP and HELP replies.
- Personal information
- Phone number, message content, delivery status and replies.
- Where
- United States.
Micropay (Israel)
Not in use yet- What it does
- Sends text messages to Israeli phone numbers.
- Personal information
- Phone number, message content and delivery status.
- Where
- Israel.
Cloudflare, Inc. (USA)
Not in use yet- What it does
- Turnstile bot check on the sign-in and booking forms, when switched on.
- Personal information
- IP address and browser and device signals needed to tell people from bots.
- Where
- Cloudflare's global network.
Google LLC (USA)
Not in use yet- What it does
- Shows a business's location on a live map on its booking page, loaded when the map appears on the visitor's screen (or on a tap, for some pages and devices). A business can turn it off.
- Personal information
- The visitor's IP address and browser details, sent by their browser straight to Google. Bookfront sends Google nothing.
- Where
- Google's global network.
2. Changes to this list
We update this page before a new provider starts handling personal information. Businesses with a Bookfront account also get an email at least 14 days before we add or replace a provider, and can object as set out in the data processing section of our Terms.
Where your information is stored and how it moves between countries is explained in our Privacy Policy.