Sub-processors
tutor.fish relies on a small number of third-party services (“sub-processors”) to run. Each processes personal data only on our instructions, under its own data-processing agreement. This is the current list; we update it before adding a new one.
Messaging and notifications
Meta Platforms Ireland Limited — the WhatsApp Business Platform, which delivers the confirmations and reminders you send to the people who book. It processes the recipient’s phone number and the message content. Operates in Ireland and the United States; cross-border transfers rely on Meta’s data-processing terms and EU Standard Contractual Clauses.
Migadu Email GmbH — delivers email confirmations, reminders and account email. It processes recipient email addresses and message content. Operates in Switzerland, which the EU recognises as providing an adequate level of data protection.
Twilio Inc. and Twilio Ireland Limited — deliver the SMS notifications a customer has opted in to. Twilio processes the recipient’s mobile number and the message content solely to deliver the message, and returns the delivery result to us. Operates in the United States and Ireland; transfers rely on Standard Contractual Clauses. Twilio may not use the data for its own purposes, and no mobile information is shared for marketing or promotional purposes.
Payments
Stripe Payments Europe, Ltd. and Stripe, Inc. — process your subscription billing and any card payment. Card details are entered directly with Stripe and never reach our servers; for us Stripe also holds your billing email, name and payment history. Operates in Ireland and the United States; transfers rely on Standard Contractual Clauses.
Hosting and infrastructure
Amazon Web Services (AWS EMEA SARL) — hosts the application and its database in Ireland (AWS eu-west-1). Your account data and your customers’ booking data are stored here.
Cloudflare, Inc. — sits in front of the service as a CDN and security proxy, so requests to the site pass through its network; it processes IP addresses and request metadata for delivery and abuse protection. Operates in the United States; transfers rely on Standard Contractual Clauses.
Error monitoring
Functional Software, Inc. (Sentry) — collects application error reports so we can find and fix faults. It is configured to strip personal data — phone numbers, message contents and card-shaped strings — before an error is recorded, and its data is held in the European Union.
Maps and directions
Google Ireland Limited — when a guest opens the “directions” link for a venue, Google Maps resolves the venue’s location. A guest who follows that link makes a request to Google under Google’s own terms; we send Google no booking data.
Changes to this list
We add a sub-processor only where the service genuinely needs one, and we update this page before the change takes effect. If your agreement with us entitles you to advance notice of a new sub-processor, we honour the notice period set out there. Questions about this list: [email protected].