Sub-Processors

Candoo Solutions, Inc. uses the following third-party service providers ("sub-processors") to deliver our services. We update this list when our vendor relationships change. For questions about how we process your data, see our Privacy Policy.

Infrastructure & Data

• Supabase — Database, authentication, edge function hosting, and file storage. Processes customer and Provider data, and all platform content. United States.

Payments

• Stripe — Payment processing, subscriptions, and invoicing. Processes payment and billing data. United States / global.

Communications

• Twilio — SMS delivery and inbound message routing. Processes phone numbers and message content. United States.
• Resend — Transactional and inbound email. Processes email addresses and message content. United States.

AI / LLM Services

The following providers process Provider-side message content when the AI Message Assist feature is enabled. Message content is not used by these providers to train their models, consistent with their enterprise data-processing terms.

• Lovable AI Gateway — Routing layer between Candoo and the model providers listed below. Processes Provider-side message content. United States / global.
• Anthropic (Claude) — Large language model inference. Processes Provider-side message content. United States.
• Google (Gemini) — Large language model inference. Processes Provider-side message content. United States / global.
• OpenAI (GPT) — Large language model inference. Processes Provider-side message content. United States.

Scheduling

• Cal.com — Appointment scheduling for Providers. Processes calendar metadata, attendee names, and email addresses. United States.

Error Monitoring

• Sentry — Application error and performance monitoring. Processes stack traces; personally identifiable information is scrubbed at the SDK layer. United States / EU.

Product Analytics

• PostHog — In-product analytics and feature flags. Processes pseudonymous user identifiers, page views, and events. United States / EU.

Customer Support

• Tidio — Live-chat widget on marketing pages. Processes visitor identifiers and chat content. United States.

Marketing Analytics & Advertising

The following providers are only active when you have accepted analytics and advertising cookies. See our Privacy Policy §6 for details on how to manage your cookie preferences.

• Google Analytics 4 — Site analytics. Processes pseudonymous identifiers. United States / global.
• Google Ads — Conversion tracking and remarketing. Processes hashed identifiers. United States / global.
• Meta (Facebook Pixel + Login) — Ad measurement, retargeting, and social login. Processes hashed identifiers and basic profile fields (name, email) when you use Facebook Login. United States.
• Nextdoor — Ad measurement and retargeting. Processes pseudonymous identifiers. United States.

Change Notifications

We refresh this list when our vendor relationships materially change. To be notified of updates in advance, email privacy@candoo.app with subject SUBSCRIBE: Sub-Processors.

Contact

Questions about this list or how we process your data?