Who else touches your data
Beautrix · Last updated: 10 September 2026
To run Beautrix we rely on other companies. Some of them necessarily hold your data, or your clients', while they do their job. This is the complete list.
Every one is bound by written terms at least as protective as our agreement with you, and we remain responsible to you for what they do.
| Who | What they do | What they hold | Where | Transfer basis |
|---|---|---|---|---|
| Supabase | Database and file storage — the actual data | Everything: your account, your clients, your bookings | EU (Ireland) [verify region] | UK/EEA — no transfer |
| Vercel | Runs the website and the app | Data in transit; request logs | EU/UK edge; US company | [verify DPF status] |
| Stripe | Your subscription, and your clients' payments to you | Your billing details; your clients' payment details, which we never see | UK/EU; US parent | Stripe Payments UK Ltd, FCA reference 900461. [verify] |
| Resend | Sends emails — your booking confirmations, our notices | Recipient name and email, message content | US | [verify DPF status] |
| Twilio | Sends the one safety text | Safety contact's phone number and the message | US | `[verify — see note above]` |
| Meta Platforms | Instagram posts on your public page | Your Instagram ID, username, account type and recent media | US | [verify DPF status] |
| Cloudflare | Stops bots filling your diary with fake bookings | IP address and browser signals of people using the booking form | Global edge; US company | [verify DPF status] |
| OpenRouteService | Drive times and travel fees | Postcodes and coordinates — not names, not addresses with names attached | Germany (Heidelberg University) | EEA — no transfer |
| DVLA | Confirms your vehicle when you enter a registration | Vehicle registration only | UK | UK — no transfer |
Two things worth saying plainly
Your clients' names and contact details never go to the mapping service. Drive times are calculated from postcodes and coordinates alone. The people working out your route do not learn who you are visiting.
We never see your clients' card numbers. They go straight from your client's browser to Stripe. There is no version of Beautrix that holds a card number, and there never will be.
When this changes
If we add or replace a sub-processor we will email you at least 30 days before it happens. If you object on reasonable data protection grounds, tell us within those 30 days: we will look for another way, and if there isn't one you can cancel without penalty and we will refund the time you have paid for and will not use.
We also re-check every US company's data protection certification periodically, because a company can withdraw from a framework without telling its customers.
Questions: privacy@beautrix.app.