Subprocessors

Last updated: 2026-04-16

A subprocessor is a third-party service we use to help operate the platform. We engage the following subprocessors and hold a written agreement (Data Processing Addendum or equivalent) with each, requiring them to protect personal information to a standard consistent with applicable privacy law.

We will update this page before adding or changing a subprocessor that handles personal information. If you have subscribed to notifications, we will also email registered Company administrators of material changes.

SubprocessorPurposeLocationData categories
Supabase (AWS)Database, authentication, file storage, realtimeJapan (AWS ap-northeast-1, Tokyo)Account info, bookings, transactions, audit logs, uploaded files
StripePayment processing and Stripe ConnectUnited States / global (per Stripe region policy)Payment amount, currency, email, charge identifiers (no card data on our servers)
ResendTransactional email delivery (default provider)United StatesRecipient email, name, booking / membership / gift card details in email body
Amazon SESTransactional email delivery (optional provider)Per configured AWS regionRecipient email, name, booking / membership / gift card details in email body
RemoteLockPhysical lock access provisioning (where a Company has enabled it)United StatesUser name, booking window, access PIN
VercelApplication hosting / edge networkGlobal edge; primary compute region co-located with database where possibleRequest metadata only; no persistent user data
SentryError monitoring and performance telemetryUnited States (unless EU region selected)Error stack traces, request metadata, user identifier (not booking content)
Anthropic (Claude)AI chatbot addon (only when a Company enables it)United StatesChat messages submitted to the Company's chatbot

Questions

For questions about a specific subprocessor or to request a copy of the relevant Data Processing Addendum, email privacy@letbook.ai.