KeroIQ Sub-processor List — v1-draft (DPA Exhibit A)
v1-draft (2026-10-29) — not yet counsel-reviewed. Not legal advice. This is Exhibit A to the in-app Data Processing Addendum that KeroIQ publishes as
v1-draftunder the owner's ruling of 2026-10-29. Counsel review may follow as a new version. Disclosure obligations must still be confirmed by counsel licensed in California.
This is the single maintained list of third parties that may process personal information on KeroIQ's behalf. It serves as Exhibit A to the KeroIQ Data Processing Addendum (keroiq.com/dpa). Changes are notified to operator customers at least 30 days in advance, per DPA §4.3.
Every entry below was verified in the codebase on 2026-09-09 (integration present and in use), per the legal-docs review. Sentry and Cloudflare's edge proxy were added 2026-10-29 after the Common Paper CSA/DPA review found them missing; both were checked in the code and config that day. Do not add entries by recollection; do not remove entries while the integration ships.
Active sub-processors
| Provider | Function | Personal information involved | Notes |
|---|---|---|---|
| Square, Inc. | Payment processing for shop orders; optional catalog/customer/loyalty sync | Order amounts, Square reference IDs, customer records the operator syncs | Square is the card processor and maintains PCI DSS for card data. KeroIQ never receives or stores card numbers/CVV/expiry. The operator's own Square account is the merchant of record. |
| Cloudinary | Image hosting | Uploaded images (logos, item photos) and associated metadata | |
| Deepgram | Speech-to-text for all voice features (voice ordering, staff command mic, other voice input) | Transient voice audio; resulting transcripts | Processes an Operator's data only while voice features are enabled for that Operator. Audio is streamed for transcription; KeroIQ does not store raw audio. Requests are sent with Deepgram's model-improvement opt-out. |
| Anthropic | AI processing (summaries, voice-command parsing, forecasts, business Q&A) | Text prompts that may include business data (menu names, schedules, customer first names on orders) | API service; not used to train models per current API terms. |
| OpenAI | Real-time conversational voice processing | Voice audio + business answers for the conversational feature | Processes an Operator's data only while voice features are enabled for that Operator. Today limited to an owner-account pilot; staff use is consent-gated. |
| Resend | Transactional and operational email | Recipient names/emails, message content | |
| Google — Gmail SMTP | Certain operational email (SMTP transport) | Recipient names/emails, message content | Distinct from Resend; both are live email paths. |
| Google — Places API | Location lookup features | Location queries (may include operator-entered addresses) | |
| OpenWeather | Weather data for forecasting features | Location coordinates only | Minimal PI exposure. |
| Vercel | Marketing-site hosting | Site-visitor request data (IPs, logs) | |
| DigitalOcean | Application and database hosting (managed PostgreSQL, droplet) | All Service data at rest and in transit within the hosting environment | Primary infrastructure provider. |
| Cloudflare (R2) | Off-site encrypted backup storage | Encrypted database backups | Backups are encrypted client-side (restic) before upload — Cloudflare never receives plaintext. |
| Cloudflare, Inc. (United States) | DNS, TLS termination, and edge proxy for the application | Request data in transit | Distinct from the R2 backup row above: as the edge proxy, Cloudflare terminates TLS and sees request data in transit. |
| Functional Software, Inc. d/b/a Sentry (United States) | Application error monitoring | Error reports and diagnostic context | Client IP, cookies, passwords, tokens, and personal information are stripped before sending. |
Pending — add at the named trigger, not before
| Provider | Function | Trigger |
|---|---|---|
| Stripe | Billing of KeroIQ subscription fees (operator billing contact + payment method, held by Stripe) | Before the first automatic subscription charge (KeroIQ invoices until subscription billing is offered). Add to the active table and to the Privacy Policy §4 at that point. |
A Spanish courtesy translation will be provided after a qualified human reviewer checks it. If the two differ, the English version controls.