Sub-Processors
Last Updated: May 2, 2026
Book8 AI uses the following third-party sub-processors to deliver our services. We are committed to transparency about who handles your data.
| Name | Purpose | Data Processed | Location |
|---|---|---|---|
| Stripe | Payment processing & subscription billing | Customer payment details, billing address, email | USA (with EU operations) |
| Twilio | Phone number provisioning, voice calls, SMS notifications | Phone numbers, call audio, SMS message content | USA (with EU presence) |
| ElevenLabs | AI voice synthesis & conversational AI | Call audio, transcripts, business context | USA |
| Google (Gemini) | LLM for conversational AI | Call transcripts during processing (not retained) | USA / EU |
| MongoDB Atlas | Primary database (business data, bookings, users) | Business profiles, booking records, user accounts | USA (multi-region) |
| Resend | Transactional email delivery | Recipient email addresses, message content | USA |
| Vercel | Application hosting (Book8 AI dashboard) | Application logs, request metadata | USA (Edge network global) |
| Render | Application hosting (book8-core-api) | Application logs, request metadata | USA |
| Cloudinary | Image hosting (business logos, photos) | Uploaded image files | USA |
| AWS Route 53 | DNS provider for book8.io | DNS query logs | USA |
| Google OAuth | Calendar integration sign-in | OAuth tokens, calendar metadata | USA / EU |
| Microsoft Azure AD | Outlook calendar integration sign-in | OAuth tokens, calendar metadata | USA / EU |
Stripe
- Purpose
- Payment processing & subscription billing
- Data Processed
- Customer payment details, billing address, email
- Location
- USA (with EU operations)
Twilio
- Purpose
- Phone number provisioning, voice calls, SMS notifications
- Data Processed
- Phone numbers, call audio, SMS message content
- Location
- USA (with EU presence)
ElevenLabs
- Purpose
- AI voice synthesis & conversational AI
- Data Processed
- Call audio, transcripts, business context
- Location
- USA
Google (Gemini)
- Purpose
- LLM for conversational AI
- Data Processed
- Call transcripts during processing (not retained)
- Location
- USA / EU
MongoDB Atlas
- Purpose
- Primary database (business data, bookings, users)
- Data Processed
- Business profiles, booking records, user accounts
- Location
- USA (multi-region)
Resend
- Purpose
- Transactional email delivery
- Data Processed
- Recipient email addresses, message content
- Location
- USA
Vercel
- Purpose
- Application hosting (Book8 AI dashboard)
- Data Processed
- Application logs, request metadata
- Location
- USA (Edge network global)
Render
- Purpose
- Application hosting (book8-core-api)
- Data Processed
- Application logs, request metadata
- Location
- USA
Cloudinary
- Purpose
- Image hosting (business logos, photos)
- Data Processed
- Uploaded image files
- Location
- USA
AWS Route 53
- Purpose
- DNS provider for book8.io
- Data Processed
- DNS query logs
- Location
- USA
Google OAuth
- Purpose
- Calendar integration sign-in
- Data Processed
- OAuth tokens, calendar metadata
- Location
- USA / EU
Microsoft Azure AD
- Purpose
- Outlook calendar integration sign-in
- Data Processed
- OAuth tokens, calendar metadata
- Location
- USA / EU
We notify customers via email at least 30 days before adding a new sub-processor that processes personal data. To object to a new sub-processor, contact privacy@book8.io.
© 2026 Book8. All rights reserved.