Legal

Sub-processors

Last updated: August 11, 2026

This page is the current list of sub-processors engaged to process Client Data, the purpose of each, and the categories of data each one processes. It is referenced by the Tersavia Master Terms and incorporated into the agreement by reference.

Each sub-processor is bound by data protection obligations no less protective than those in the Master Terms, and Provider remains responsible for their performance.

This list is pending review.

The entries below are accurate to the best of our current knowledge and are being verified against our production systems. If you are relying on this list for a vendor assessment or a data protection review, contact us at hello@shamrok.com and we will confirm the current list in writing.

Sub-processor	Purpose	Categories of Client Data
Payment processor	Card processing, payouts, and payment-related records for transactions run through the Platform. Referred to as the Processor in the Master Terms.	Transaction records, payment method metadata, payer name and contact details, business banking details.
Vercel	Application hosting, content delivery, file and image storage, and website analytics for the marketing site.	All Client Data transiting the Platform, uploaded files and images, request logs, website usage data.
Neon	Managed PostgreSQL database hosting for Platform records.	Client records, appointment and booking records, business configuration, content records.
Twilio	Telephony and SMS delivery, including appointment notifications and messaging campaigns registered under A2P/10DLC.	Phone numbers, message content, call and message metadata.
Retell	AI voice reception — answering calls, conducting the conversation, and transcribing calls.	Call audio, transcripts, caller name and phone number, appointment details discussed on the call.
Resend	Transactional and notification email delivery from the Platform.	Email addresses, recipient names, message content.
Anthropic	AI model provider for assistant features, content generation, and drafted responses.	Content submitted for generation or drafting, and the business context supplied with it.
OpenAI	AI model provider for content generation and image generation.	Content submitted for generation, generation prompts.
Google	Advertising and website measurement for the marketing site, and campaign management for clients who subscribe to the Google Ads module.	Website usage data, advertising identifiers, campaign performance data.
Meta	Advertising measurement for the marketing site, and publishing for clients who subscribe to the Social Media module.	Website usage data, advertising identifiers, published content and engagement data.

Payment processor

Purpose: Card processing, payouts, and payment-related records for transactions run through the Platform. Referred to as the Processor in the Master Terms.
Categories of Client Data: Transaction records, payment method metadata, payer name and contact details, business banking details.

Vercel

Purpose: Application hosting, content delivery, file and image storage, and website analytics for the marketing site.
Categories of Client Data: All Client Data transiting the Platform, uploaded files and images, request logs, website usage data.

Neon

Purpose: Managed PostgreSQL database hosting for Platform records.
Categories of Client Data: Client records, appointment and booking records, business configuration, content records.

Twilio

Purpose: Telephony and SMS delivery, including appointment notifications and messaging campaigns registered under A2P/10DLC.
Categories of Client Data: Phone numbers, message content, call and message metadata.

Retell

Purpose: AI voice reception — answering calls, conducting the conversation, and transcribing calls.
Categories of Client Data: Call audio, transcripts, caller name and phone number, appointment details discussed on the call.

Resend

Purpose: Transactional and notification email delivery from the Platform.
Categories of Client Data: Email addresses, recipient names, message content.

Anthropic

Purpose: AI model provider for assistant features, content generation, and drafted responses.
Categories of Client Data: Content submitted for generation or drafting, and the business context supplied with it.

OpenAI

Purpose: AI model provider for content generation and image generation.
Categories of Client Data: Content submitted for generation, generation prompts.

Google

Purpose: Advertising and website measurement for the marketing site, and campaign management for clients who subscribe to the Google Ads module.
Categories of Client Data: Website usage data, advertising identifiers, campaign performance data.

Integrations you direct

Where you connect the Platform to booking software you already use — Vagaro, Mindbody, Boulevard, Booker — data moves between that system and the Platform at your direction and under your agreement with that vendor. Those providers are not engaged by us as sub-processors; connecting them is your choice, and disconnecting them stops the exchange.

Changes to this list

We give notice of a new sub-processor before it begins processing Client Data, and this page is updated when the list changes. The date at the top reflects the most recent update.

Questions about this list, or about a specific sub-processor, go to hello@shamrok.com.