Sub-processors
This page lists the third parties that may process customer personal data to deliver Openbiznis. We give at least 30 days' notice before adding or replacing one, per section 8 of the DPA.
1. How to be notified of changes
Email ceo@launchzy.eu with the subject "Sub-processor notifications" and we will add you to the notice list. Customers may object to a new sub-processor on reasonable data protection grounds within the notice period, as set out in the Data Processing Agreement.
2. Infrastructure sub-processors
These providers host or transmit customer data as part of running the platform.
| Provider | Purpose | Processing location |
|---|---|---|
| Supabase | Primary application database, authentication, and file storage | European Union |
| Vercel | Application hosting, edge delivery, and request logging | European Union (with global edge network) |
| Telnyx | Voice telephony — call origination and termination, phone numbers, and call metadata for the in-browser dialer | European Union / United States |
3. Integration sub-processors
These process data only where a customer enables the corresponding integration. If the integration is off, no data flows to the provider.
| Provider | Purpose | Processing location |
|---|---|---|
| Google (Google Calendar API) | Two-way calendar synchronisation for booked appointments | European Union / United States |
| Meta Platforms | Delivery of Instagram and Facebook conversations into the shared inbox | European Union / United States |
| Manychat | Conversational automation, lead qualification, and tagging across connected social channels | United States |
4. Transfers outside the EEA
Where a provider above processes personal data outside the European Economic Area, the transfer relies on an adequacy decision by the European Commission where one applies to that provider, and otherwise on the European Commission's Standard Contractual Clauses (Decision 2021/914) together with supplementary measures identified in a transfer impact assessment.
5. Our own personnel
Launchzy personnel may access customer data where necessary to provide support, investigate a fault, or respond to a security incident. Access follows least privilege, requires multi-factor authentication, and is recorded in the audit trail.
6. Contact
Questions about this list, or a request for the current version in writing: ceo@launchzy.eu.