Sub-Processors

Candoo Solutions, Inc. uses the following third-party service providers ("sub-processors") to deliver our services. We update this list when our vendor relationships change. For questions about how we process your data, see our Privacy Policy.

Infrastructure & Data

• Supabase — Database, authentication, edge function hosting, and file storage. Processes customer and Provider data, and all platform content. United States.
• Fly.io — Hosting for our malware-scanning service that inspects uploaded attachments. Processes file contents of customer/Provider attachments. United States.

Payments

• Stripe — Payment processing, subscriptions, and invoicing. Processes payment and billing data. United States / global.

Property Data

• RentCast — Property record lookups from a service address to enrich home profiles. Processes property street addresses.

Communications

• Twilio — SMS delivery and inbound message routing. Processes phone numbers and message content. United States.
• Resend — Transactional and inbound email. Processes email addresses and message content. United States.
• Slack — Internal staff notifications. When you submit a form or book a service, our team receives an alert containing your name, email address, phone number, and property address so we can respond. United States.

AI / LLM Services

The following providers process Provider-side message content when the AI Message Assist feature is enabled. Message content is not used by these providers to train their models, consistent with their enterprise data-processing terms.

• Lovable AI Gateway — Routing layer between Candoo and the model providers listed below. Processes Provider-side message content. United States / global.
• Anthropic (Claude) — Large language model inference. Processes Provider-side message content. United States.
• Google (Gemini) — Large language model inference. Processes Provider-side message content. United States / global.
• OpenAI (GPT) — Large language model inference. Processes Provider-side message content. United States.

Maps & Location

• Google Maps Platform — Street View imagery and address autocomplete/geocoding. Processes street addresses. United States / global.

Scheduling

• Calendly — Appointment scheduling for consultations and onboarding kickoffs. Processes calendar metadata, attendee names, and email addresses. United States.

Error Monitoring

• Sentry — Application error and performance monitoring. Processes stack traces; personally identifiable information is scrubbed at the SDK layer. United States / EU.

Security

• Google reCAPTCHA Enterprise — Bot and abuse protection on public forms. Processes visitor interaction and form-submission signals. United States / global.

Product Analytics

• PostHog — In-product analytics, feature flags, and masked session replay. Processes pseudonymous user identifiers, page views, events, and replays of site interactions with form inputs and on-screen text masked. Linked to your account email when you are signed in. United States / EU.

Customer Support

• Tidio — Live-chat widget on marketing pages. Processes visitor identifiers and chat content. United States.

Marketing Analytics & Advertising

The following providers are active by default, including before you make a cookie choice. They stop when you choose "Necessary Only" or browse with Global Privacy Control turned on. See Your Privacy Choices to change this at any time.

• Google Analytics 4 — Site analytics. Processes pseudonymous identifiers. United States / global.
• Google Ads — Conversion tracking and remarketing. Processes hashed identifiers. United States / global.
• Meta (Facebook Pixel + Login) — Ad measurement, retargeting, and social login. Processes hashed identifiers and basic profile fields (name, email) when you use Facebook Login. United States.
• Nextdoor — Ad measurement and retargeting. Processes pseudonymous identifiers. United States.

Change Notifications

We refresh this list when our vendor relationships materially change. To be notified of updates in advance, email privacy@candoo.co with subject SUBSCRIBE: Sub-Processors.

Contact

Questions about this list or how we process your data?