Carbonara uses the service providers below to process Guest personal data on behalf of the restaurants and other businesses that use Carbonara ("Businesses"). This list is Annex III of our Data Processing Agreement, which forms part of our Terms of Use.
Carbonara has a written agreement with each sub-processor that protects Guest personal data at least as well as the Data Processing Agreement, except SignalMash, which does not offer one (see below). Carbonara remains responsible to the Business for each sub-processor.
Changes to this list
We give at least 30 days' notice before adding or replacing a sub-processor, by updating this page and emailing each Business's account owner. Where a sub-processor gives us shorter notice of a change on its side, we tell Businesses as soon as we are told.
A Business may object on reasonable data protection grounds within the notice period by writing to [email protected]. We will try in good faith to find a workable alternative; if we cannot, the Business may stop using the affected part of the service, or end the Terms, without penalty.
Current sub-processors
| Sub-processor | What it does | Guest data it receives | Where data is stored |
|---|---|---|---|
| Google LLC (Google Cloud, Firebase) | Hosting, database, login, file storage, push notifications | All Guest personal data | United States |
| Salesforce, Inc. (Heroku) | Hosts the statistics service behind Business reports | Visit, deposit, order and message-delivery details and Guest phone numbers, without message or note text | United States |
| Hetzner Online GmbH | Hosts Carbonara's own error-monitoring and reporting tools | Error reports and statistics that can include Guest details | Finland (EU) |
| Cloudflare, Inc. | Protects and delivers the booking and waitlist pages | Page traffic in transit, IP addresses | Global network |
| Mitto AG | SMS and WhatsApp delivery | Phone number, message text | Europe (Microsoft Azure); Mitto is in Switzerland |
| Bird B.V. (formerly MessageBird) | SMS and MMS delivery in some countries, and automated voice calls in the EU | Phone number, message text | EU (Netherlands, Belgium) |
| Messente Communications OÜ | SMS delivery in some EU countries, Australia and Switzerland | Phone number, message text | EU (Germany, Finland) |
| SignalMash | SMS and automated voice calls to US and Canadian numbers only. SignalMash does not offer a data processing agreement; it receives only what is needed to deliver the message. | Phone number, message text | United States |
| Meta Platforms Ireland Ltd (WhatsApp) | WhatsApp message delivery | Phone number, message text | United States and other countries |
| Twilio Inc. (SendGrid) | Booking and account emails | Email address, name, booking details | United States |
| Logshero Ltd (Logz.io) | Back-end log storage and search | Log entries, which can include Guest details | United Kingdom (support from the US and UK) |
| Mixpanel, Inc. | Product analytics | Usage events and session replays, masked as described in Annex II of the DPA, without Guest names, contact details or health-related flags (older app versions still in use send more; see the DPA) | United States |
| Stripe, Inc. / Stripe Payments Europe Ltd | Deposits and pre-orders | Card details, name and email address the Guest enters, amounts | United States / Ireland |
| Google LLC (Google Workspace) | Support email and documents | Guest details in support requests | Global |
| Elastic Inc. (Close) | Customer records and support conversations with Businesses | Guest details a Business shares when it asks for support | United States |
| TimelinesAI LLC | Support conversations with Businesses | Guest details a Business shares when it asks for support | EU (AWS, Google Cloud, Microsoft Azure; some integrations may run in the United States); TimelinesAI is in the United States |
| Botpress Technologies Inc. | The in-app AI support assistant. Botpress uses Google's Gemini AI model to generate answers. | Only Guest details a Business user types into the assistant (the Terms ask users not to) | United States |
Not sub-processors
Reserve with Google, Apple's App Store and Google Play receive data as independent controllers under their own terms, so they are not sub-processors.