Sub-Processors
This page lists the third-party service providers (“sub-processors”) that InteractXP uses to deliver its services. We keep this list current. Restaurant clients may request a Data Processing Addendum at legal@interactxp.com. Material additions to this list will be communicated to clients with a reasonable opportunity to object before the new sub-processor begins processing client data.
Active Sub-Processors
Each sub-processor is bound by its own data-processing terms. We assess each before onboarding and review their certifications periodically.
| Vendor | Role | Data Types Processed | Jurisdiction | DPA |
|---|---|---|---|---|
| Supabase, Inc. | Authentication, Postgres database, file storage (avatars, banners), row-level security policies | Account credentials, profile data, comments, votes, follows, notifications, push subscriptions, uploaded images | United States | View |
| Vercel Inc. | Application hosting, edge runtime, deployment logs | Server logs, IP addresses, request metadata | United States | View |
| Stripe, Inc. | Payment processing, subscription billing, invoicing | Cardholder data (PCI-DSS), billing email, billing address | United States | View |
| Zylvie | Checkout user-experience layer over Stripe | Order metadata | United States | On request |
| Twilio Inc. | Outbound and inbound SMS delivery (compliance pipeline) | Phone numbers, message content, delivery receipts, STOP/HELP keyword interactions | United States | View |
| RockstarSMS / "Easy Text" | Bulk opt-in SMS broadcast delivery | Phone numbers, broadcast message content, subscriber lists | United States | On request |
| Brevo (formerly Sendinblue) | Transactional and opt-in marketing email delivery | Email address, email content, delivery + open + click events | European Union (Germany / France) and United States | View |
| MoreGoodReviews | Review-management platform integration | Review content, ratings, customer name + contact details our restaurant clients provide | United States | On request |
| Thoughtly | AI inbound phone agent for restaurant clients | Inbound call audio, AI-generated transcripts, call metadata | United States | On request |
| EzeChats / Aminos.ai | AI website chatbot for restaurant clients | Chatbot conversation transcripts, visitor inputs | United States | On request |
| Boost.space | Workflow automation, blog content management | Blog posts, automation logs | European Union (Czech Republic) | View |
| Teable.io | Internal database for waitlist, contact, and audit form submissions; content calendar | Form-submitted name, email, phone, restaurant name, message, consent timestamp | United States | On request |
| Google LLC (Places API only) | Restaurant business search autocomplete in our forms | Search query strings entered by users; no personal data sent unless typed by the user | United States | On request |
| VisitorTracking | Cookieless website analytics | Aggregated, non-personal page-view events | United States | On request |
| Browser push services (Apple, Google, Mozilla) | Routing of user-opted-in push notifications to devices | Push endpoint URL + VAPID key; no message body retention | Various | On request |
Updates
Material additions or substitutions to the list above will be posted here with at least 14 days' notice to active restaurant clients (where applicable). To receive these notifications by email, contact legal@interactxp.com.
Questions
For questions about sub-processors, to request our standard Data Processing Addendum, or to request Standard Contractual Clauses for cross-border transfers, contact legal@interactxp.com.