Subprocessors
These are the service providers Handro uses to run the Service, under contracts that limit their use of the data they touch to providing it on our behalf. See the Privacy Policy (Section 6) for the full context. We'll give Organizations advance notice by email before adding a subprocessor that handles Customer Data. For customer payments, Stripe and Square are alternatives chosen by your Organization. Stripe also handles Handro subscriptions purchased on the web. QuickBooks is a paid-plan feature you choose to connect. If you sign in with Google or Apple instead of a password, they provide your name and email to us, but we don't list them above since they act as your own identity provider rather than processing data on our instructions. If you use our calendar subscription (.ics) feed, the calendar app you point it at isn't listed here — it's not a subprocessor we select or contract with, it's your own choice; see the Privacy Policy Section 6. If you purchase a Handro subscription through the App Store, Apple handles billing under its own terms. We exchange purchase identifiers and a random organization-linked token with Apple for verification, restoration and subscription status; this does not send your customer list, job records or photos to Apple.
| Provider | What it does | What it touches | Location |
|---|---|---|---|
| Vercel Inc. | Application hosting and delivery | All data in transit; web logs | United States |
| Supabase, Inc. (on Amazon Web Services) | PostgreSQL database and object storage (job photos, org logos) | All stored Service data, including uploaded photos | United States (AWS us-west-2, Oregon) |
| Stripe, Inc. / Stripe Payments Canada, Ltd. | Web Handro subscription billing; customer payment processing and Connect onboarding for Organizations that connect Stripe | Payment and identity data you or your customers give Stripe; transaction metadata | United States / global |
| Square, Inc. (a Block, Inc. company) | Payment processing and merchant onboarding, for Organizations that connect Square instead of Stripe | Payment and identity data you or your customers give Square; transaction metadata | United States / global |
| Intuit Inc. (QuickBooks Online) | Accounting sync, for Organizations on a paid plan that connect QuickBooks | Customer names and the invoice/payment data you choose to sync | United States |
| Google LLC | Calendar sync — pushing a job's event to a connected Google Calendar, for Organizations on a paid plan where you or a teammate connects Google Calendar | The relevant job's customer name, phone number, and service address, plus job title, time, and status | United States / global |
| Twilio Inc. | Transactional SMS/text-message delivery, for End Customer phone numbers that have opted in to text messages | The phone number and message content of opted-in transactional texts (arrival alerts, appointment reminders, estimate notifications) | United States / global |
| Resend (Plus Five Five, Inc.) | Transactional email delivery | Recipient addresses and message contents (bookings, estimates, receipts, reminders) | United States |
| Functional Software, Inc. (Sentry) | Error monitoring | Error events, which may include IP address and browser/device metadata | United States |
| PostHog, Inc. | Product analytics for signed-in account holders | User ID, email address, organization ID, mobile screen views, device/browser data and IP address — never Customer Data | United States |
| Cloudflare, Inc. | DNS and network edge | Traffic metadata | United States / global |