Data

Sub-processors

Reviewed 2 September 2026●The Operating Algorithm Ltd · 17120198 · England and Wales●5 services · no ad-tech●Previous versions

Every service that can touch personal data on the platform, what it does, what can reach it, and where it runs. This page is the list our Data Processing Agreement authorises — it changes only after the 30-day notice the DPA promises, never quietly.

1The list

Vercel — Hosting, edge network and cookieless analytics

What can reach itAll traffic to the platform, request logs, and the pages it serves

Where it runsUK (London, lhr1) with a global edge network

Transfer basisUK adequacy / IDTA where processing leaves the UK

Supabase — Database and authentication

What can reach itAll platform data at rest — accounts, bookings, client records

Where it runsEU (Frankfurt, eu-central-1)

Transfer basisUK–EU adequacy regulations

Twilio — SMS delivery

What can reach itRecipient phone numbers and message text

Where it runsUnited States

Transfer basisIDTA / Addendum to the EU SCCs

Resend — Email delivery

What can reach itRecipient email addresses and message content

Where it runsUnited States

Transfer basisIDTA / Addendum to the EU SCCs

OpenRouter → Anthropic — Drafting AI text (retention messages, briefs, generated copy)

What can reach itThe shop context needed for the requested text — never card data

Where it runsUnited States

Transfer basisIDTA / Addendum to the EU SCCs

The AI phone receptionist's voice provider is not yet on this list because the feature hasn't taken a real call for any shop. It joins the list — after the 30-day notice — before the first one, never after.

2Independent controllers (not sub-processors)

Stripe — Payments, payouts and identity verification. Each shop holds its own Stripe account; Stripe is an independent controller of payment data under its own privacy policy. Card numbers never touch Fadelio.

3How changes work

30 days' notice before any change takes effect — with a right to object.

Before we add or replace a sub-processor, shops are notified at least 30 days in advance (by email or in the dashboard) and this page is updated. A shop with a reasonable objection we can't resolve may cancel under section 4 of the Terms. Every past change is recorded in the version history.