Sub-processors
Last updated: 10 October 2026
We use a deliberately small set of third-party providers (“sub-processors”, or “sub-operators” in POPIA terms) to run Boetbook. This is the complete list: there are no analytics providers, no advertising networks, and no email marketing tools. Each provider processes data only as needed for the purpose listed. This page supports our Operator Agreement and Privacy Policy; when the list changes, we update this page and its date.
| Provider | What it does | Where data is processed |
|---|---|---|
| Supabase | Database, authentication, and file storage (all account data and customer content, including job photos) | eu-west-1 region, Republic of Ireland (EU) |
| Cloudflare | Website and application hosting, content delivery network, DNS, and Turnstile bot protection on the sign-in, sign-up and password-reset forms (checks technical signals such as IP address and browser details to tell people from bots; not used to profile or advertise) | Global edge network (Cloudflare, Inc., USA) |
| Paystack | Payment processing for paid subscriptions. We share the account owner's email address (tagged per business, so each business has its own Paystack customer) so Paystack can send receipts; card details go directly to Paystack and never touch our servers | South Africa / Nigeria (Paystack, a Stripe company) |
| Optional “Sign in with Google” authentication (name and email address of users who choose it) | Global (Google LLC, USA) | |
| Resend | Delivers account emails: sign-in codes, sign-up confirmation and password-reset links (the recipient's email address and the message) | eu-west-1 region, Republic of Ireland (EU) (Resend, Inc., USA) |
| TypeSafe AI | Ranks Suggested actions (the “Jev” decision model), only for paid businesses whose owner turned on Smart suggestions (beta). We send short, de-identified summaries (e.g. “invoice one to four weeks overdue, customer paid all earlier invoices”), never names, contact details, amounts or record ids. Only if the owner also turns on “Also read job notes”: the text of recent job notes and comments, with the customer's name, phone numbers, email addresses and rand amounts removed. Not used to train models | United States (TypeSafe, Inc.) |
Questions about any of these providers? Email [email protected].