Sub-processors
This version takes effect on 2026-11-30. Until then the current version applies.
Our hosting is Google Cloud in Frankfurt with our own database servers, AI requests go only to Google Gemini, our email server's host OVH is listed, the Terms and Privacy name the China fapiao invoice flow, the fiscal settings screen is named as it is today, the Fleet Terms add clause 5.13 (a delivery never handed over: the customer is refunded in full, the establishment is paid for the food, the delivery company is charged), and the Sub-processors list names every accounting, CRM and till system you can connect. You can object to the new sub-processors within 30 days.
Contents
The companies that help us run BlinkFix and may process your organisation's personal data.
The short version
- This list applies to the Data Processing Agreement. We give at least 30 days' notice before adding or replacing a sub-processor.
- Our servers and our database run on Google Cloud in Frankfurt, Germany. Some providers are US companies, and our email server is in Canada; transfers are covered by an adequacy decision, the Data Privacy Framework or standard contractual clauses with the UK Addendum.
Current sub-processors
| Sub-processor | Purpose | Data processed | Location | Transfer safeguard |
|---|---|---|---|---|
| Google Cloud EMEA Ltd / Google LLC (Google Cloud) | Hosting of the API, services and websites (Google Kubernetes Engine); the virtual machines that run BlinkFix's own database; storage for sign-in sessions, rate limits and caches (Memorystore for Valkey); storage of secrets (Secret Manager) | All Customer Personal Data in transit, in use and stored | Frankfurt, Germany (EU), for every customer, including those outside the UK and the EEA | DPF / SCCs + UK Addendum |
| Cloudflare, Inc. | DNS, network security and content delivery for our websites and API; file storage (R2) for photos, videos, files and documents; storage (R2) of our database backups, kept 7 days | Files, IP addresses, request data, database backups | Global network (US company) | DPF / SCCs + UK Addendum |
| Google LLC / Google Cloud EMEA Ltd (Gemini models through Vertex AI, a paid service, no training on your data) | AI model inference for the AI assistant and brand-skin requests, for reading menus, recipes and product lists from files an admin or manager imports, and for reading student ID cards | Prompts, data the assistant reads for the seat holder, brand assets, imported files and text; student card photos | Google's global service, so a request may be processed outside the UK and the EEA | DPF / SCCs + UK Addendum |
| Google LLC (Firebase Cloud Messaging; Google Maps Platform) | Push notifications to Android and iOS devices; address search, geocoding and directions | Push tokens and notification content; addresses and coordinates | USA and global | DPF / SCCs + UK Addendum |
| Stripe Payments Europe Ltd / Stripe, Inc. | Card, Apple Pay and Google Pay payments, including supplier orders, deliveries and car deposits; head office subscriptions, invoices and bank transfers; bonuses; AI credits bought on the website; wallets and payouts (Stripe Connect) | Payer and payee names, emails, amounts; identity and bank details for payout accounts | Ireland, USA | DPF / SCCs + UK Addendum |
| 650 Industries, Inc. (Expo) | Push notifications for the BlinkFix Enterprise app | Push tokens, device names, notification content | USA | SCCs + UK Addendum |
| Apple Inc. (APNs) | Push delivery to iPhones | Push tokens, notification content | USA and global | DPF / SCCs + UK Addendum |
| OVH Hosting, Inc. (OVHcloud) | Hosting of the server on which BlinkFix runs its own email server and MailWizz, for service emails (codes, invites, notifications) | Names, email addresses, email content | Beauharnois, Quebec, Canada | Adequacy decision for Canada (commercial organisations) |
"DPF" means the EU–US Data Privacy Framework and its UK Extension, for recipients certified under it. "SCCs" means the European Commission's standard contractual clauses (2021/914). "UK Addendum" means the UK International Data Transfer Addendum. "Adequacy decision for Canada" means the European Commission's Decision 2002/2/EC and the UK's recognition of it, which cover organisations subject to Canada's Personal Information Protection and Electronic Documents Act. We will confirm on request which mechanism applies to each provider.
Not sub-processors
- App Store and Google Play. When someone buys a plan or AI credits in a BlinkFix app, Apple or Google takes the payment and handles the purchase under its own terms and privacy policy, as its own controller. We receive the purchase record.
- Map pictures. Maps on our websites load from OpenStreetMap and OpenFreeMap, and maps in our apps from Apple Maps or Google Maps. These services receive the device's IP address and the area shown, not your organisation's data.
Integrations you choose
When your organisation or an establishment connects HubSpot, Pipedrive, Salesforce, Square, Clover, Xero, QuickBooks, Sage, FreeAgent, Zoho Books or another system, connects its own fiscal printer, certified fiscal software or cloud fiscal service, or registers a webhook or uses an API key, data is sent to that system on your instruction. Those providers are not BlinkFix sub-processors; your contract with them applies. A cloud fiscal service that BlinkFix itself contracts for a country would be different: BlinkFix would add it to the table above, with the notice described under Changes, before it receives any data.
Changes
We update this page and email your organisation's admins or account owners at least 30 days before a new or replacement sub-processor starts processing Customer Personal Data. You can object as set out in section 6 of the Data Processing Agreement.
This update (30 October 2026). On 8 October 2026 we moved our hosting from Fly.io, MongoDB Atlas (MongoDB, Inc.) and Upstash to Google Cloud in Frankfurt, where we now run our own database servers. Those three companies no longer process Customer Personal Data. Our AI requests, including reading imported menus and product lists, go only to Google Gemini through Vertex AI; we no longer use OpenAI. Our email server, which we already ran ourselves, is now listed with its host, OVH, in Canada. This is a replacement of sub-processors: you can object within 30 days of this notice, as set out in section 6 of the Data Processing Agreement. This version also names every accounting, CRM and till system an organisation can connect (see Integrations you choose); that adds no sub-processor.
Contact
[email protected] · BlinkFix Ltd, 27 Old Gloucester Street, London WC1N 3AX, United Kingdom.