Sub-processors
The companies we use to run Couvella and what each one does with a restaurant’s data. Each is bound by contract to protect it, as set out in the data processing agreement. Restaurants are told by email at least 30 days before a company is added. Last updated 25 September 2026.
Cloudflare, Inc.
What for: Runs the application and serves the booking pages; stores logos, images and backups; delivers email routing for our own addresses.
What data: All data passes through; logos, images and backups are stored.
Where: European Union and Switzerland, with worldwide edge delivery.
Neon, Inc.
What for: Hosts the database.
What data: All bookings, guest records, settings and team accounts.
Where: European Union.
Stripe Payments Europe, Ltd.
What for: Bills the subscription and SMS credit; holds cards and takes charges under the restaurant's card policy through the restaurant's own Stripe account.
What data: Guest name and card details (held by Stripe, never by us); the account holder's billing details.
Where: European Union, with transfers to the United States under standard contractual clauses.
Paystack Payments Limited
What for: For restaurants in South Africa: holds cards and takes charges under the restaurant’s card policy, with the restaurant as a subaccount, and bills the subscription and message credit in rand for Edenroche (Pty) Ltd.
What data: Guest name, email address and card details (held by Paystack, never by us); the account holder’s billing details.
Where: South Africa and Nigeria.
Resend, Inc.
What for: Delivers the emails the application sends.
What data: Recipient email address and the content of each message.
Where: European Union sending region, with transfers to the United States under standard contractual clauses.
Bird B.V. (MessageBird)
What for: Delivers text messages, and WhatsApp messages for restaurants that choose WhatsApp.
What data: Recipient telephone number and the content of each message.
Where: European Union, with carrier delivery in the destination country.
Meta Platforms Ireland Ltd (WhatsApp)
What for: Carries guest messages on WhatsApp, delivered through Bird, for restaurants that choose WhatsApp.
What data: Guest telephone number and the content of each message.
Where: European Union, with transfers to the United States under standard contractual clauses.
Anthropic, PBC
What for: Provides the language model behind Ask.
What data: The text of the question and only the parts of the diary and settings needed to answer it; not retained for training under our commercial terms.
Where: United States, under standard contractual clauses.
On our marketing website only
Not sub-processors: these never receive a restaurant’s data, its guests’ details or anything from the booking pages, the application or our emails. They run only on couvella.com’s own pages about Couvella and its sign-up, and only for visitors who accept advertising cookies there, to measure our advertising. See the privacy policy.
Google Ireland Limited
What for: Google Analytics and Google Ads measurement, with consent.
Where: European Union, with transfers to the United States under the EU-US Data Privacy Framework.
Meta Platforms Ireland Limited
What for: the Meta Pixel, to measure advertising on Facebook and Instagram, with consent.
Where: European Union, with transfers to the United States under the EU-US Data Privacy Framework.
Errors in the application are reported to us through Slack Technologies, LLC (a message naming the route and a reference, never guest data) and, where configured, Sentry. These receive no personal data about guests.