Subprocessors

A subprocessor is an outside company we rely on to operate BookNox, for hosting, database storage, email delivery, payments, calendar integration, and product analytics. Each one handles a limited slice of data strictly to provide its service, under its own privacy policy and our data processing terms. This page lists every subprocessor that handles personal data on our behalf, what it does, and where it operates. For the full picture of what we collect and why, see our Privacy Policy.

BookNox is operated by NetNest Design LLC, a Wyoming limited liability company.

Current subprocessors

• Stripe, Inc.: payment processing, Stripe Connect Express vendor onboarding, and the separate billing account that runs vendor subscriptions under Stripe Managed Payments. Handles: vendor KYC information and client payment details, both collected by Stripe directly through forms hosted by Stripe; BookNox receives only payment metadata; for vendor subscriptions, the customer, subscription, and invoice records on our billing account. Location: United States. Role: independent controller for the data it collects directly from you; processor for payment routing. Governed by stripe.com/privacy.
• Link (Sold through Link, LLC, a Stripe affiliate): merchant of record for vendor subscriptions to the BookNox platform, through Stripe Managed Payments. Handles: vendor billing details, collected directly through Link’s hosted checkout; sales tax on the subscription. As the seller, Link shares the order details with us (name, email address, billing address, plan, and the amount and date of each charge); we keep the subscription status, dates, and amounts, and use the checkout name only to help catch fraud. Location: United States. Role: independent controller for the billing data it collects directly from you as the seller; listed here so the billing flow is complete, although it does not process data on our instructions. Governed by link.com/privacy.
• Former subscription billing provider: billed vendor subscriptions until September 24, 2026. Handles: past charge records only. Location: United States.
• Neon, Inc.: Postgres database hosting (via the Vercel Marketplace). Handles: vendor accounts, proposal records, signature audit trails, and booking records. Location: United States.
• Vercel, Inc.: site hosting, server function runtime, domain registration, DNS, private Blob storage, and cookieless Web Analytics. Handles: all platform data in transit and at rest, including signed PDFs and signature images in private Blob storage, standard server logs (request paths and geolocation derived from IP addresses), plus anonymous, aggregate page view counts (no cookies, no profiling). Location: United States.
• HeyCatch, Inc. (a Delaware corporation): product analytics. Handles: on public pages, page views, clicks with the clicked label, form submit events (never the field contents), page address and title, IP address, device and browser, plus one first party cookie and one local storage entry; for a vendor account created on or after October 22, 2026, its account id, email address, plan and signup date (older accounts are never identified to it). Nothing from the dashboard, the admin area, proposal, sign in and testimonial links, or a vendor’s booking page beyond that sign in, and nothing about a vendor’s clients. Its own subprocessors PostHog, Inc. (stores the events on its US cloud) and OpenRouter, Inc. (routes the activity to the AI models that summarize it). Kept while BookNox subscribes, then deleted or anonymized 2 months after. Location: United States (model providers reached through OpenRouter process in various locations).
• Resend, Inc.: transactional email delivery. Handles: recipient email addresses and the contents of transactional messages (proposal links, signed contract attachments, deposit receipts, ICS calendar invites, sign in links). Location: United States.
• Google LLC (Google Calendar API): calendar event creation + free/busy availability, only when a vendor explicitly authorizes it. Handles: an encrypted OAuth token, the booking event details we write to the vendor’s connected calendar, and the vendor’s free/busy time ranges (busy/free only, never event titles, descriptions, or attendees) used to show open dates on their public booking page. We do not read the contents of existing events; the authorization is revocable at any time. Location: United States.
• Geoapify GmbH (mapping & routing): only when a client types an event address on a vendor’s booking page to get an exact travel quote. Handles: the event address (or its coordinates) used to geocode the location, measure driving distance from the vendor’s studio, and render a route map. Leaving the address blank skips Geoapify entirely. Location: European Union / United States.

Tools that are not subprocessors

Not every piece of technology we use is a subprocessor. The software libraries, build tools, and runtime components that power BookNox, the ones that never receive a copy of your personal data, are not listed here, because a subprocessor is specifically a third party that processes personal data on our behalf. Vercel Web Analytics is cookieless (anonymous, aggregate page views); HeyCatch product analytics is listed above. At signup we also record, first party and session based (no cookie), which site referred you (host only) and any campaign tags in your link, to see where signups come from; this stays with us and is never used for tracking across sites. We run no advertising trackers or pixels.

Changes to this list

This list reflects our current subprocessors. We update this page whenever we add, remove, or replace a subprocessor that handles personal data. Active vendors are notified by email, at the address on file, of any material change before it takes effect. To be added to a change notification list, or to ask a question about any subprocessor, email privacy@booknox.com.