Subprocessors - Vidimo

These subprocessors process personal data on Vidimo's behalf, only as needed to provide their service and under appropriate security and data protection measures.

Our database and file storage are in the EU. The region shown is where each provider processes data; "Varies" means Vidimo does not fix it.

Vercel
Region
EU (Stockholm, Sweden) for application servers; logs, analytics, the content delivery network and the AI Gateway vary and may be outside the EU
Purpose
Web app and API hosting, serverless infrastructure, website analytics, and AI Gateway model routing
Data processed
Account data, workspace data, guest communication data, booking/context data, logs, page-visit analytics, and AI prompts/responses where AI features are used
Supabase
Region
EU (Stockholm, Sweden)
Purpose
Transactional database and backend services
Data processed
Account data, workspace data, guest records, conversation metadata/content, booking/context data
Google Cloud
Region
EU (storage across EU regions; key management in Belgium)
Purpose
Media storage for uploaded images, and key management for encrypting integration credentials
Data processed
Media and attachments uploaded by customers and guests, encrypted integration credentials
PowerSync
Region
EU (Ireland)
Purpose
Synchronising workspace data to the devices of a customer and their staff, including offline use
Data processed
Account data, workspace data, guest records, conversation content, booking/context data, encrypted integration credentials
Resend
Region
EU (Ireland) for sending; where stored email data is kept varies and may be outside the EU
Purpose
Transactional email delivery and inbound guest email
Data processed
Email addresses, email content, delivery metadata
Sentry
Region
EU (Germany)
Purpose
Error monitoring and performance diagnostics
Data processed
Technical logs, error reports, device/browser metadata, account, property and app-installation identifiers, and any personal data incidentally captured in a log
Twilio
Region
United States
Purpose
SMS, WhatsApp and voice call infrastructure
Data processed
Phone numbers, WhatsApp/SMS message content and media, message metadata, delivery and call metadata
Meta
Region
United States and other countries
Purpose
The WhatsApp and Instagram platforms that carry guest conversations, and connecting a WhatsApp Business account
Data processed
Guest WhatsApp and Instagram messages and media, profile names, phone numbers, account identifiers, and the IP address of a guest viewing a property's Instagram feed
Stripe
Region
United States
Purpose
Payments, billing, invoices, and subscriptions, including guest payments
Data processed
Customer billing data, payment metadata, subscription data, and guest payment details entered at checkout
Channex
Region
Varies; may be outside the EU
Purpose
Channel management: exchanging availability, rates, and bookings with travel platforms
Data processed
Booking details, guest name and contact information, stay dates, rates and availability
Apple
Region
United States
Purpose
Push notifications on iPhone and iPad, and Sign in with Apple
Data processed
Notification content, including the sender's name and a message preview; device tokens; Apple ID details when signing in with Apple
Google
Region
United States and other countries
Purpose
Push notifications on Android, Sign in with Google, address lookup with Google Maps, and maps shown in the guest portal
Data processed
Notification content, including the sender's name and a message preview; device tokens; Google account details when signing in with Google; address searches; the IP address of a guest viewing a map
Google Workspace
Region
United States and other countries
Purpose
Email for customer and guest support
Data processed
Support emails and their attachments
Capgo
Region
Varies; may be outside the EU
Purpose
Delivering updates to the Vidimo mobile app
Data processed
Device identifier, app version, platform, IP address, and app crash and error reports
Dynamsoft
Region
Varies; may be outside the EU
Purpose
Licence check for passport and ID scanning, on the guest's or staff member's device
Data processed
A device identifier and IP address; Dynamsoft never receives the scanned document

Subprocessor	Purpose	Data processed	Region
Vercel	Web app and API hosting, serverless infrastructure, website analytics, and AI Gateway model routing	Account data, workspace data, guest communication data, booking/context data, logs, page-visit analytics, and AI prompts/responses where AI features are used	EU (Stockholm, Sweden) for application servers; logs, analytics, the content delivery network and the AI Gateway vary and may be outside the EU
Supabase	Transactional database and backend services	Account data, workspace data, guest records, conversation metadata/content, booking/context data	EU (Stockholm, Sweden)
Google Cloud	Media storage for uploaded images, and key management for encrypting integration credentials	Media and attachments uploaded by customers and guests, encrypted integration credentials	EU (storage across EU regions; key management in Belgium)
PowerSync	Synchronising workspace data to the devices of a customer and their staff, including offline use	Account data, workspace data, guest records, conversation content, booking/context data, encrypted integration credentials	EU (Ireland)
Resend	Transactional email delivery and inbound guest email	Email addresses, email content, delivery metadata	EU (Ireland) for sending; where stored email data is kept varies and may be outside the EU
Sentry	Error monitoring and performance diagnostics	Technical logs, error reports, device/browser metadata, account, property and app-installation identifiers, and any personal data incidentally captured in a log	EU (Germany)
Twilio	SMS, WhatsApp and voice call infrastructure	Phone numbers, WhatsApp/SMS message content and media, message metadata, delivery and call metadata	United States
Meta	The WhatsApp and Instagram platforms that carry guest conversations, and connecting a WhatsApp Business account	Guest WhatsApp and Instagram messages and media, profile names, phone numbers, account identifiers, and the IP address of a guest viewing a property's Instagram feed	United States and other countries
Stripe	Payments, billing, invoices, and subscriptions, including guest payments	Customer billing data, payment metadata, subscription data, and guest payment details entered at checkout	United States
Channex	Channel management: exchanging availability, rates, and bookings with travel platforms	Booking details, guest name and contact information, stay dates, rates and availability	Varies; may be outside the EU
Apple	Push notifications on iPhone and iPad, and Sign in with Apple	Notification content, including the sender's name and a message preview; device tokens; Apple ID details when signing in with Apple	United States
Google	Push notifications on Android, Sign in with Google, address lookup with Google Maps, and maps shown in the guest portal	Notification content, including the sender's name and a message preview; device tokens; Google account details when signing in with Google; address searches; the IP address of a guest viewing a map	United States and other countries
Google Workspace	Email for customer and guest support	Support emails and their attachments	United States and other countries
Capgo	Delivering updates to the Vidimo mobile app	Device identifier, app version, platform, IP address, and app crash and error reports	Varies; may be outside the EU
Dynamsoft	Licence check for passport and ID scanning, on the guest's or staff member's device	A device identifier and IP address; Dynamsoft never receives the scanned document	Varies; may be outside the EU

AI model providers

AI requests go through the Vercel AI Gateway to a provider able to serve the model. A request and its response may include message content, booking/context data and voice recordings. Only the Claude requests of the assistant, chat titles, suggested actions drawn from guest messages and support messages run in an EU data centre; the rest may run outside the EU, including in the United States.

Amazon Web Services
Region
EU for Claude in the assistant, chat titles, suggested actions drawn from guest messages and support messages; varies for other requests
What it may serve
Claude models for the assistant, chat titles, suggested actions drawn from guest messages, and reading and translating support messages, and the open-weight gpt-oss-120b model
Google Cloud (Vertex AI)
Region
EU for Claude in the assistant, chat titles, suggested actions drawn from guest messages and support messages; varies for other requests
What it may serve
Claude models for the assistant, chat titles, suggested actions drawn from guest messages, and reading and translating support messages
Baseten, Fireworks AI, Groq, Nebius, Parasail, Together AI
Region
Varies; may be outside the EU
What it may serve
The open-weight gpt-oss-120b model, which drafts replies, translates messages and spots staff unavailability
TypeSafe AI
Region
Varies; may be outside the EU
What it may serve
The Jev classifier, which scores whether a guest message needs the host to act, to measure and tune suggested actions
Microsoft Azure
Region
Varies; may be outside the EU
What it may serve
Text embeddings of the help guides and of staff questions to the assistant, for searching the guides
OpenAI
Region
Varies; may be outside the EU
What it may serve
Transcription of voice messages and voice dictation

Provider	What it may serve	Region
Amazon Web Services	Claude models for the assistant, chat titles, suggested actions drawn from guest messages, and reading and translating support messages, and the open-weight gpt-oss-120b model	EU for Claude in the assistant, chat titles, suggested actions drawn from guest messages and support messages; varies for other requests
Google Cloud (Vertex AI)	Claude models for the assistant, chat titles, suggested actions drawn from guest messages, and reading and translating support messages	EU for Claude in the assistant, chat titles, suggested actions drawn from guest messages and support messages; varies for other requests
Baseten, Fireworks AI, Groq, Nebius, Parasail, Together AI	The open-weight gpt-oss-120b model, which drafts replies, translates messages and spots staff unavailability	Varies; may be outside the EU
TypeSafe AI	The Jev classifier, which scores whether a guest message needs the host to act, to measure and tune suggested actions	Varies; may be outside the EU
Microsoft Azure	Text embeddings of the help guides and of staff questions to the assistant, for searching the guides	Varies; may be outside the EU
OpenAI	Transcription of voice messages and voice dictation	Varies; may be outside the EU

Language-model requests carry a zero-data-retention instruction; transcription of voice messages and voice dictation is the one exception, explained in our Privacy Policy.

Guest-portal push notifications go through the push service of the guest's own browser, such as Apple's, Google's, Microsoft's or Mozilla's.

We update this page when we add or replace a subprocessor in a way that materially affects how personal data is processed.