Subprocessors
Effective July 29, 2026
What this page is
A subprocessor is a third party that may process data on our behalf while delivering the service. Below is every one we use, what it does, and what it can see. Entries marked optional only ever receive data if you switch that feature on or connect your own account.
We'll update this list before adding a new subprocessor that handles customer data. For how data is protected generally, see the security page.
Current subprocessors
| Service | Purpose | Data it receives |
|---|---|---|
| Stripe | Card payments, subscription billing, and in-person Tap to Pay | Payment details, payer name and email, invoice amounts. Card numbers never reach our servers. |
| PayPalOptional | Alternative online invoice payment | Payer identifiers and transaction amounts, for businesses that enable it. |
| TwilioOptional | Outbound SMS, and inbound voice for the AI receptionist | Recipient phone numbers and message contents; call audio where the receptionist is enabled. |
| ResendOptional | Transactional email delivery | Recipient email addresses and message contents (estimates, invoices, reminders, portal links). |
| CloudinaryOptional | Storage and delivery of uploaded media | Job photos, signed forms, and file attachments. |
| AnthropicOptional | The AI assistant, receipt OCR, and the marketing-site chatbot | The text of assistant conversations and the specific records the assistant reads to answer a question. Not used to train models. |
| OpenAI | Speech-to-text, and the voice layer of the AI receptionist | Audio recordings submitted for transcription; call audio where the receptionist is enabled. |
| SerpApiOptional | Part identification, supplier lookup, and address geocoding | Uploaded part photos and address strings submitted for geocoding. |
| Intuit (QuickBooks Online)Optional | One-way accounting sync | Customers, invoices, and payments, for businesses that connect it. |
| XeroOptional | One-way accounting sync | Customers, invoices, and payments, for businesses that connect it. |
| GoogleOptional | Single sign-on | Email address and basic profile, only for users who sign in with Google. |
| Expo | Mobile push notification delivery | Device push tokens and notification contents. |
Reducing what's shared
Several integrations let you connect your own account, which keeps that data on your own contract with the provider rather than ours — messaging, email delivery, media storage, AI usage, and part lookup all support this from Settings → Integrations.
Features you never enable never send anything. If you don't switch on the AI receptionist, no call audio is processed; if you don't connect accounting, nothing is pushed to QuickBooks or Xero.
Questions
For a data-processing agreement or a security questionnaire, email security@gruvik.com.