This list is made from the services snuepi’s code actually calls. We do not sell data or share it for marketing. How transfers outside the EEA are safeguarded is in the privacy policy; how the service is protected is on the trust page.
1. Always in use
These process data for every business on snuepi.
| Provider | What for | Personal data | Where | When |
|---|---|---|---|---|
| Fly.io | Hosting the application and its database | Everything stored in snuepi | Stockholm, Sweden | Always |
| Cloudflare (R2) | Encrypted backups of the database and of uploaded images | Everything stored in snuepi | Being confirmed | Always |
| Scaleway | The language model that reads price lists, catalogs, requests and invoices, drafts answers in conversations with AI assistants, and at setup reads the business’s own website to suggest its services, prices and hours (only when the model is EU-hosted; emails, phone numbers and IBANs removed first) | The text the model is given | EU | Always |
| Resend | Sending email: confirmations, notices to owners, the reports you ask for | The recipient’s address and the email’s content | Being confirmed | Always |
| Stripe | The subscription fee; deposits and no-show fees, which are taken on the business’s own Stripe account and never held by snuepi | Card details (held by Stripe, never by snuepi), amounts, the customer’s name and email | Being confirmed | When a fee, deposit or no-show fee is used |
| Twilio (SMS and WhatsApp) | Texting a customer the link to confirm or manage a booking or request, when the AI assistant gave a phone number and no email | The customer’s phone number, the business’s name and the link | Being confirmed | Whenever snuepi has a Twilio account set up and a customer has no email, whatever phone setup the business has |
| Meta (WhatsApp), through Twilio | Delivering that message on WhatsApp, as Twilio’s sub-processor | The customer’s phone number and the message | Being confirmed | Only when snuepi has a WhatsApp sender set up |
| Sentry | Error tracking | Technical error messages, no customer content | Being confirmed | Always |
2. When a business turns it on
Used only for the businesses, lines or checks that switch the feature on.
| Provider | What for | Personal data | Where | When |
|---|---|---|---|---|
| Twilio, Telnyx or SignalWire | The phone line, when snuepi answers a business’s phone | The caller’s number and what was said, as text (calls are not recorded) | Being confirmed | Only for businesses that let snuepi answer their phone |
| Microsoft Azure Speech | Real-time voice on the phone: speech to text and text to speech | Audio while the call lasts; not stored | An EU or EEA region (snuepi turns it off anywhere else) | Only on lines where the business turns real-time voice on |
| An EU-hosted language model for Call checks | Reading call transcripts to check what an AI assistant promised | The transcript, with phone numbers, emails, card and account numbers masked first, and names and street addresses where they can be recognised | EU (required): the language model above when it is EU-hosted, or a separate EU-hosted model | Only for Call checks an agency or business runs |
3. Systems a business connects
A business that connects its own calendar or booking system decides that itself. snuepi reads and writes there on the business’s instruction; the provider is the business’s own, under its own terms.
| Provider | What for | Personal data | Where | When |
|---|---|---|---|---|
| The business’s Google Calendar | Busy times; the bookings snuepi writes in | Google’s own terms | If the business connects it | |
| Microsoft | The business’s Outlook calendar, or Dynamics 365 Business Central | Busy times; the bookings or orders snuepi writes in | Microsoft’s own terms | If the business connects it |
| Booking and restaurant systems | Square, Calendly, Cal.com, Acuity Scheduling, resOS, Mindbody, Phorest, Vagaro, Setmore, SimplyBook.me, OpenTable, TheFork, Formitable | Services, staff and booking times; the bookings snuepi writes in | The system’s own terms | If the business connects it |
| Voice-agent platforms | Vapi and Retell, for Call checks | The calls the agency chooses to have checked | The platform’s own terms | If an agency connects it |
4. Services that get no personal data
snuepi also calls these, but sends them nothing about a person:
- Company registers: national business registers, VIES (European Commission), Companies House (UK) and recherche-entreprises (France). They receive a company or VAT number to check a business.
- A timestamp authority, when one is set: it receives only the fingerprint of each day’s sealed records.
- Public key directories (Visa, Mastercard, Skyfire, Maskinporten): snuepi fetches their public keys to check an AI assistant’s signature and sends them nothing.
5. Changes
We update this page before a new sub-processor starts processing personal data. Questions: support@snuepi.com.