Subprocessors
Every third-party company that can process data on our behalf, what each one receives, and what it is used for.
Last updated: October 15, 2026
Running Booked55 means relying on other companies — to host the database, process payments, deliver email, and run the AI models behind our AI features. Each one is a subprocessor: it may handle data on our instructions, for a specific purpose, under a contract that requires it to protect that data and prohibits using it for its own purposes.
This page is the complete list. It is the detail behind Section 4 of our Privacy Policy, which governs in the event of any conflict.
We do not sell your personal information, and no company on this list receives your data for its own advertising or resale.
Infrastructure and storage
These providers hold the platform itself and deliver the emails and sign-in codes Booked55 sends you. Everything you store in Booked55 lives here.
| Provider | What it does | Data it receives | Processed in |
|---|---|---|---|
| MongoDB Atlas | Primary database — every CRM record you create | All account and CRM data: users, contacts, companies, deals, pipelines, activities, tasks, events, campaigns, email content, chat history | Canada |
| Akamai (Linode) | Application hosting and file storage | Application servers, and every file you upload — attachments, imports, exports, images | Canada |
| Postmark (ActiveCampaign) | Sending Booked55's own emails to users: sign-in codes, invitations, notices and alerts. This is our outgoing mail service, separate from any mailbox you connect. | Recipient email address and the message. | United States |
| Twilio | Texting sign-in codes to people who choose to get their two-factor authentication codes by text message instead of from an authenticator app. | The mobile number of the person signing in. Twilio makes and checks the code itself. | United States |
MongoDB Atlas
- What it does
- Primary database — every CRM record you create
- Data it receives
- All account and CRM data: users, contacts, companies, deals, pipelines, activities, tasks, events, campaigns, email content, chat history
- Processed in
- Canada
Akamai (Linode)
- What it does
- Application hosting and file storage
- Data it receives
- Application servers, and every file you upload — attachments, imports, exports, images
- Processed in
- Canada
Postmark (ActiveCampaign)
- What it does
- Sending Booked55's own emails to users: sign-in codes, invitations, notices and alerts. This is our outgoing mail service, separate from any mailbox you connect.
- Data it receives
- Recipient email address and the message.
- Processed in
- United States
Twilio
- What it does
- Texting sign-in codes to people who choose to get their two-factor authentication codes by text message instead of from an authenticator app.
- Data it receives
- The mobile number of the person signing in. Twilio makes and checks the code itself.
- Processed in
- United States
AI providers
When you use an AI feature, the data needed to answer that specific request is sent to one of these providers. They process it to return a result and do not use it to train their models — for AssemblyAI that is because we have opted out of their model-improvement programme, which is noted on its row below. If you would rather no data left our infrastructure for AI processing, do not use the AI features. Most of them run only when you ask; the four that run in the background — meeting recording, the classification and summary of replies during mail sync, pipeline coaching emails, and AI task suggestions on a pipeline stage an administrator has set up — are listed in Section 9 of the Privacy Policy, with how to turn each one off.
| Provider | What it does | Data it receives | Processed in |
|---|---|---|---|
| Anthropic (Claude) | AI assistant conversations, reasoning, email drafting, pipeline coaching | Your chat messages and the CRM records relevant to the request you made | United States |
| Cerebras | Fast AI tasks — business-card scanning, chat titles, sub-agent tool calls, reading a calendar invitation for its meeting link, writing up a recorded meeting, and, during mail sync, classifying and summarising replies to your emails | Card images you scan, the CRM records relevant to the request, the text of a calendar invitation when we cannot find its join link any other way, where meeting recording is on the transcript of the call being summarised, and during mail sync the new text of a reply together with up to 1,500 characters of the email it answers | United States |
| Google (Gemini) | Document and image understanding, structured data extraction, and, as a fallback when Cerebras is unavailable, classifying replies to your emails during mail sync | The file or record content for the request you made; on the fallback path, the new text of a reply together with up to 1,500 characters of the email it answers | United States |
| Perplexity | Web research for company search and contact enrichment | The search terms — typically a company or person name and domain | United States |
| AssemblyAI | Speech to text — turning dictation into written notes when you use the microphone button on a text field. AssemblyAI also provides the LLM gateway through which the transcribed text is sent to Anthropic's Claude to be cleaned up (punctuation, spelling, filler words); nothing is added or summarised. | The audio you record while the microphone is on, the text transcribed from it, and — so that names are spelled correctly — the name of the contact and company the note is attached toAudio is streamed straight from your browser or phone to AssemblyAI and is not stored by us or, once transcribed, by them. Recording only ever happens while you hold the microphone on; nothing is captured in the background. We have opted out of their model-improvement programme, so your dictation is not used to train their models. | United States or Ireland, whichever is nearest |
Anthropic (Claude)
- What it does
- AI assistant conversations, reasoning, email drafting, pipeline coaching
- Data it receives
- Your chat messages and the CRM records relevant to the request you made
- Processed in
- United States
Cerebras
- What it does
- Fast AI tasks — business-card scanning, chat titles, sub-agent tool calls, reading a calendar invitation for its meeting link, writing up a recorded meeting, and, during mail sync, classifying and summarising replies to your emails
- Data it receives
- Card images you scan, the CRM records relevant to the request, the text of a calendar invitation when we cannot find its join link any other way, where meeting recording is on the transcript of the call being summarised, and during mail sync the new text of a reply together with up to 1,500 characters of the email it answers
- Processed in
- United States
Google (Gemini)
- What it does
- Document and image understanding, structured data extraction, and, as a fallback when Cerebras is unavailable, classifying replies to your emails during mail sync
- Data it receives
- The file or record content for the request you made; on the fallback path, the new text of a reply together with up to 1,500 characters of the email it answers
- Processed in
- United States
Perplexity
- What it does
- Web research for company search and contact enrichment
- Data it receives
- The search terms — typically a company or person name and domain
- Processed in
- United States
AssemblyAI
- What it does
- Speech to text — turning dictation into written notes when you use the microphone button on a text field. AssemblyAI also provides the LLM gateway through which the transcribed text is sent to Anthropic's Claude to be cleaned up (punctuation, spelling, filler words); nothing is added or summarised.
- Data it receives
- The audio you record while the microphone is on, the text transcribed from it, and — so that names are spelled correctly — the name of the contact and company the note is attached to
- Audio is streamed straight from your browser or phone to AssemblyAI and is not stored by us or, once transcribed, by them. Recording only ever happens while you hold the microphone on; nothing is captured in the background. We have opted out of their model-improvement programme, so your dictation is not used to train their models.
- Processed in
- United States or Ireland, whichever is nearest
Contact data enrichment
Business-data providers that fill in what you did not type. Automatic enrichment of new contacts is on by default; an owner or manager can turn it off for the whole organization in Organization settings. Enrichment you ask for by hand — the Enrich button on a contact or company, or a bulk enrichment — runs only when you ask. The providers change over time, so this row describes the category; email us for the current list.
| Provider | What it does | Data it receives | Processed in |
|---|---|---|---|
| Contact data enrichment providersEmail us for the current list of providers | Filling in missing business details (job title, company, location, LinkedIn and other social profiles) on newly created and imported contacts, and on any contact or company you ask to enrich. On by default; an owner or manager can turn it off for the whole organization in Organization settings. | Name, email address and company of new contacts. For a contact you ask to enrich, also the phone number, location and LinkedIn URL if they are on the record; for a company, its website domain. | United States |
Contact data enrichment providersEmail us for the current list of providers
- What it does
- Filling in missing business details (job title, company, location, LinkedIn and other social profiles) on newly created and imported contacts, and on any contact or company you ask to enrich. On by default; an owner or manager can turn it off for the whole organization in Organization settings.
- Data it receives
- Name, email address and company of new contacts. For a contact you ask to enrich, also the phone number, location and LinkedIn URL if they are on the record; for a company, its website domain.
- Processed in
- United States
Meeting recording
Off unless an administrator turns it on for the organisation. While it is on, a notetaker joins the video meetings on your team's connected calendars, and the people in those meetings — including guests who are not Booked55 users — are recorded. The notetaker appears in the participant list under your organisation's name and posts a message in the meeting chat saying the call is being recorded and transcribed as soon as it joins. Any meeting can be skipped from its task, and a declined invitation is never recorded.
| Provider | What it does | Data it receives | Processed in |
|---|---|---|---|
| Recall.ai | Sending the notetaker into a meeting, recording the call, and transcribing the recording | The meeting's join link and passcode, its title and time, and the notetaker's name (your organisation and the person the meeting belongs to). Once it joins: the audio, video, screen share and chat of the call, and the display names of everyone in it.Recall.ai holds the recording and the transcript it produces; the transcript and the written summary are copied back into Booked55 and shown on the meeting's task. Deleting your organisation deletes that organisation's recordings at Recall.ai as well. | United States (Oregon) |
Recall.ai
- What it does
- Sending the notetaker into a meeting, recording the call, and transcribing the recording
- Data it receives
- The meeting's join link and passcode, its title and time, and the notetaker's name (your organisation and the person the meeting belongs to). Once it joins: the audio, video, screen share and chat of the call, and the display names of everyone in it.
- Recall.ai holds the recording and the transcript it produces; the transcript and the written summary are copied back into Booked55 and shown on the meeting's task. Deleting your organisation deletes that organisation's recordings at Recall.ai as well.
- Processed in
- United States (Oregon)
Email, calendar and messaging
Only active if you connect the integration. We hold an access token scoped to the permissions you granted and can disconnect it at any time from your settings.
| Provider | What it does | Data it receives | Processed in |
|---|---|---|---|
| Google (Gmail, Calendar) | Sending and syncing email, syncing calendar events | Messages and events in the mailbox or calendar you connected | United States |
| Microsoft (Outlook, Graph) | Sending and syncing email, syncing calendar events | Messages and events in the mailbox or calendar you connected | United States |
| UniPile | Connecting LinkedIn, WhatsApp, Instagram or Telegram so messages can be read and sent from Booked55 (only for organizations with the socials feature enabled, after a user connects their own account) | The connected account's messages, conversation partners and profile details | France (European Union) |
Google (Gmail, Calendar)
- What it does
- Sending and syncing email, syncing calendar events
- Data it receives
- Messages and events in the mailbox or calendar you connected
- Processed in
- United States
Microsoft (Outlook, Graph)
- What it does
- Sending and syncing email, syncing calendar events
- Data it receives
- Messages and events in the mailbox or calendar you connected
- Processed in
- United States
UniPile
- What it does
- Connecting LinkedIn, WhatsApp, Instagram or Telegram so messages can be read and sent from Booked55 (only for organizations with the socials feature enabled, after a user connects their own account)
- Data it receives
- The connected account's messages, conversation partners and profile details
- Processed in
- France (European Union)
Payments
| Provider | What it does | Data it receives | Processed in |
|---|---|---|---|
| Stripe | Subscription billing and payment processing | Billing name, email, address, and card details. Card numbers are entered directly with Stripe and never reach our servers. | United States |
Stripe
- What it does
- Subscription billing and payment processing
- Data it receives
- Billing name, email, address, and card details. Card numbers are entered directly with Stripe and never reach our servers.
- Processed in
- United States
Analytics and monitoring
These tell us how the product is used and when it breaks. Apart from what PostHog records of our AI features, they do not receive your CRM records as such, but error reports can incidentally contain data that was on screen when something went wrong.
| Provider | What it does | Data it receives | Processed in |
|---|---|---|---|
| PostHog | Product analytics inside the app and on the marketing website, and a record of what our AI features are sent and answer, so we can find and fix the AI's mistakes | Pages viewed, features used and clicks. Inside the app, once you log in: your account ID, email address, name, role and organization ID. Each AI assistant conversation (your messages, its replies, the steps it took and the CRM records it read or changed) and each other AI feature's input and result, deleted after 30 days; never the content of email you received, calendar events or social messages, or of the tasks, notes and meetings made from them, and no pictures or files. Session recording is turned off inside the app; on the marketing website it runs only after you accept analytics cookies in the consent banner. | United States |
| Google Ads (Google tag) | Measuring whether visits from our Google ads lead to sign-ups — marketing website only | IP address, pages visited, and an ad-click identifier. Sets cookies only after you accept advertising cookies in the consent banner; before that Google receives only cookieless, aggregated signals. | United States |
| Apollo.io | Identifying the company a visitor is browsing from on our marketing website; also one of the contact data enrichment providers described above when enrichment is on. | IP address and pages viewed. Loaded only after you accept advertising cookies in the consent banner. When enrichment is on: the name, email address and company of newly created contacts. | United States |
| Sentry | Error and performance monitoring | Stack traces, request metadata, user and organization IDs. Authorization headers, cookies, API keys, passwords and tokens are stripped before sending. No session replay. | United States |
PostHog
- What it does
- Product analytics inside the app and on the marketing website, and a record of what our AI features are sent and answer, so we can find and fix the AI's mistakes
- Data it receives
- Pages viewed, features used and clicks. Inside the app, once you log in: your account ID, email address, name, role and organization ID. Each AI assistant conversation (your messages, its replies, the steps it took and the CRM records it read or changed) and each other AI feature's input and result, deleted after 30 days; never the content of email you received, calendar events or social messages, or of the tasks, notes and meetings made from them, and no pictures or files. Session recording is turned off inside the app; on the marketing website it runs only after you accept analytics cookies in the consent banner.
- Processed in
- United States
Google Ads (Google tag)
- What it does
- Measuring whether visits from our Google ads lead to sign-ups — marketing website only
- Data it receives
- IP address, pages visited, and an ad-click identifier. Sets cookies only after you accept advertising cookies in the consent banner; before that Google receives only cookieless, aggregated signals.
- Processed in
- United States
Apollo.io
- What it does
- Identifying the company a visitor is browsing from on our marketing website; also one of the contact data enrichment providers described above when enrichment is on.
- Data it receives
- IP address and pages viewed. Loaded only after you accept advertising cookies in the consent banner. When enrichment is on: the name, email address and company of newly created contacts.
- Processed in
- United States
Sentry
- What it does
- Error and performance monitoring
- Data it receives
- Stack traces, request metadata, user and organization IDs. Authorization headers, cookies, API keys, passwords and tokens are stripped before sending. No session replay.
- Processed in
- United States
Changes to this list
We update this page when we add or remove a subprocessor. If you have a written agreement with us that requires advance notice of new subprocessors, we will give you that notice as agreed. To be notified of changes, or to ask a question about any provider listed here, email [email protected].
See also: Privacy Policy · Security · Terms of Service