Sub-processors
The companies that help us run BlinkFix and may process your organisation's personal data.
Current sub-processors
| Sub-processor | Purpose | Data processed | Location | Transfer safeguard |
|---|---|---|---|---|
| Google Cloud EMEA Ltd / Google LLC (Google Cloud) | Hosting of the API, services and websites (Google Kubernetes Engine); the virtual machines that run BlinkFix's own database; storage for sign-in sessions, rate limits and caches (Memorystore for Valkey); storage of secrets (Secret Manager) | All Customer Personal Data in transit, in use and stored | Frankfurt, Germany (EU), for every customer, including those outside the UK and the EEA | DPF / SCCs + UK Addendum |
| Cloudflare, Inc. | DNS, network security and content delivery for our websites and API; file storage (R2) for photos, videos, files and documents; storage (R2) of our database backups, kept 7 days | Files, IP addresses, request data, database backups | Global network (US company) | DPF / SCCs + UK Addendum |
| Google LLC / Google Cloud EMEA Ltd (Gemini models through Vertex AI, a paid service, no training on your data) | AI model inference for the AI assistant and brand-skin requests, for reading menus, recipes and product lists from files an admin or manager imports, and for reading student ID cards | Prompts, data the assistant reads for the seat holder, brand assets, imported files and text; student card photos | Google's global service, so a request may be processed outside the UK and the EEA | DPF / SCCs + UK Addendum |
| Google LLC (Firebase Cloud Messaging; Google Maps Platform) | Push notifications to Android and iOS devices; address search, geocoding and directions | Push tokens and notification content; addresses and coordinates | USA and global | DPF / SCCs + UK Addendum |
| Stripe Payments Europe Ltd / Stripe, Inc. | Card, Apple Pay and Google Pay payments, including supplier orders, deliveries and car deposits; head office subscriptions, invoices and bank transfers; bonuses; AI credits bought on the website; wallets and payouts (Stripe Connect) | Payer and payee names, emails, amounts; identity and bank details for payout accounts | Ireland, USA | DPF / SCCs + UK Addendum |
| 650 Industries, Inc. (Expo) | Push notifications for the BlinkFix Enterprise app | Push tokens, device names, notification content | USA | SCCs + UK Addendum |
| Apple Inc. (APNs) | Push delivery to iPhones | Push tokens, notification content | USA and global | DPF / SCCs + UK Addendum |
| OVH Hosting, Inc. (OVHcloud) | Hosting of the server on which BlinkFix runs its own email server and MailWizz, for service emails (codes, invites, notifications) | Names, email addresses, email content | Beauharnois, Quebec, Canada | Adequacy decision for Canada (commercial organisations) |
"DPF" means the EU–US Data Privacy Framework and its UK Extension, for recipients certified under it. "SCCs" means the European Commission's standard contractual clauses (2021/914). "UK Addendum" means the UK International Data Transfer Addendum. "Adequacy decision for Canada" means the European Commission's Decision 2002/2/EC and the UK's recognition of it, which cover organisations subject to Canada's Personal Information Protection and Electronic Documents Act. We will confirm on request which mechanism applies to each provider.
Not sub-processors
- App Store and Google Play. When someone buys a plan or AI credits in a BlinkFix app, Apple or Google takes the payment and handles the purchase under its own terms and privacy policy, as its own controller. We receive the purchase record.
- Map pictures. Maps on our websites load from OpenStreetMap and OpenFreeMap, and maps in our apps from Apple Maps or Google Maps. These services receive the device's IP address and the area shown, not your organisation's data.
Integrations you choose
When your organisation or an establishment connects HubSpot, Pipedrive, Salesforce, Square, Clover, Xero, QuickBooks or another system, or registers a webhook or uses an API key, data is sent to that system on your instruction. Those providers are not BlinkFix sub-processors; your contract with them applies.
Changes
We update this page and email your organisation's admins or account owners at least 30 days before a new or replacement sub-processor starts processing Customer Personal Data. You can object as set out in section 6 of the Data Processing Agreement.
This update (23 October 2026). On 8 October 2026 we moved our hosting from Fly.io, MongoDB Atlas (MongoDB, Inc.) and Upstash to Google Cloud in Frankfurt, where we now run our own database servers. Those three companies no longer process Customer Personal Data. Our AI requests, including reading imported menus and product lists, go only to Google Gemini through Vertex AI; we no longer use OpenAI. Our email server, which we already ran ourselves, is now listed with its host, OVH, in Canada. This is a replacement of sub-processors: you can object within 30 days of this notice, as set out in section 6 of the Data Processing Agreement.
Contact
[email protected] · BlinkFix Ltd, 27 Old Gloucester Street, London WC1N 3AX, United Kingdom.