Legal
Subprocessors
Last updated
These are the companies that process personal data for us so that we can provide Recoatly. We give account owners at least 30 days' notice before adding or replacing one, as described in our Data Processing Addendum.
How we use subprocessors
We use a small number of service providers to host Recoatly, deliver its email and text messages, power its AI features and look up addresses. Each one is bound by a written contract to protect personal data and to use it only to provide its service to us. Some are used only when a business, or one of its Users, uses the feature concerned.
Before a new or replacement subprocessor processes Customer Data, we update this page and email account owners at least 30 days in advance, and you can object as described in our Data Processing Addendum.
Infrastructure and delivery
Our hosting provider (named here once selected)
- Purpose: Runs the servers that host Recoatly, and stores its database, uploaded files and encrypted backups.
- Personal data: All Customer Data and account information stored in Recoatly.
- Location: United States (a single region).
- Used: Always.
Resend
- Purpose: Delivers the email Recoatly sends: estimates, invoices, reminders, campaigns and other messages businesses send to their customers, and our own account emails.
- Personal data: Recipients' names and email addresses, the sending business's name and contact details, the content of each message, and delivery information such as bounces and spam complaints.
- Location: United States.
- Used: Always.
Our team’s alerting channel
- Purpose: Tells our engineers when something in Recoatly breaks, so it can be fixed quickly.
- Personal data: Technical error details and the ID of the business affected. These rarely contain personal data, but an error message can occasionally include a fragment of the record being processed.
- Location: Named here once selected.
- Used: When an unexpected error happens.
Features a business chooses to use
Twilio Inc.
- Purpose: Sends and receives text messages and, where enabled, phone calls.
- Personal data: Phone numbers of senders and recipients, message content, delivery status, and opt-out replies such as STOP.
- Location: United States.
- Used: Only for businesses that have text messaging switched on.
Anthropic, PBC
- Purpose: Provides the AI model behind Recoatly's assistant, estimate drafting, writing help, summaries and voice capture.
- Personal data: The text a User enters or dictates and the business information sent with it to answer the request, which can include customer names, team members’ names, job, estimate and price-book details, figures from reports, knowledge-base articles and call transcripts.
- Location: United States.
- Used: Only when a User uses an AI feature. Our agreement does not allow Anthropic to train its models on this data.
U.S. Census Bureau (geocoding service)
- Purpose: Looks up map coordinates for service addresses in the United States, for the schedule map, dispatch and route planning.
- Personal data: Street addresses only, without names or contact details.
- Location: United States.
- Used: When an address in the United States needs to be placed on the map.
Google LLC (Google Maps Platform)
- Purpose: Looks up map coordinates for service addresses in every country, instead of the Census service.
- Personal data: Street addresses only, without names or contact details.
- Location: United States.
- Used: Only if we switch on Google address lookup. It is not used until then.
Payments
Stripe, Inc.
- Purpose: Processes the subscription payments for Recoatly itself.
- Personal data: The billing contact's name and email address, the company name, the billing address and tax ID if provided, card details (collected directly by Stripe), and subscription and invoice records.
- Location: United States.
- Used: When a business subscribes or manages its billing.
When your customers pay your invoices online, the payment is processed through your own Stripe account, connected to Recoatly with Stripe Connect. Recoatly gives Stripe the invoice details, the amount and your customer's email address so that Stripe can take the payment. For those payments, Stripe acts under your own agreement with Stripe, not as our subprocessor.
Our own website
Plausible Insights OÜ (Plausible Analytics)
- Purpose: Counts visits to our public website, without cookies.
- Personal data: Page addresses, referring sites, browser, operating system, device type and country. IP addresses are used only to calculate an anonymous identifier that changes every day, and are not stored.
- Location: European Union.
- Used: Only when we switch on website analytics. It does not process Customer Data.
Questions
If you have questions about our subprocessors, contact us through the contact page at https://recoatly.com/contact.