CouthActs Incorporated ("CouthActs") uses the service providers below to process personal data on its behalf. Each is bound by a written agreement that limits its use of personal data to providing services to CouthActs and requires appropriate security. Transfers outside the European Economic Area and the United Kingdom are protected as described in Section 9 of our Privacy Policy.
1. Current Subprocessors
| Service provider | Purpose | Personal data processed | Entity location |
|---|---|---|---|
| Vercel Inc. | Website and API hosting, serverless functions, scheduled jobs, storage of uploaded avatars and logos (Vercel Blob), runtime logs | All Service data in transit and processing; uploaded images; IP addresses in logs | United States |
| Neon (serverless Postgres) | Primary database | All account, Job, Booking, Wallet, message, location and log data stored by CouthActs | United States |
| Stripe, Inc. and affiliates | Card payments (Checkout), Provider payouts (Connect), identity verification (Identity), fraud prevention | Name, email, payment and payout details, ID document, selfie and facial comparison data, transaction data | United States |
| Resend | Transactional and account email delivery | Name, email address, email content (including notification text and chat message previews) | United States |
| Pusher (Pusher Ltd) | Real-time delivery of messages, notifications and tracking updates to open apps | Message content and sender name, notification text and location updates delivered to the signed-in parties to a Booking, bid amounts | United Kingdom |
| Functional Software, Inc. (Sentry) | Error monitoring and performance diagnostics | Technical data about errors and performance, scrubbed before sending of request bodies, cookies, authentication headers, contact details and other personal data except an internal user ID | United States |
| Apple Inc. (Apple Push Notification service) | Push notifications to Apple devices | Device token, notification title and text | United States |
| Google LLC (Firebase Cloud Messaging) | Push notifications to Android devices | Device token, notification title, text and link | United States |
| openrouteservice (HeiGIT gGmbH) | Route distance estimates for quotes, when enabled | Pickup and delivery coordinates (no names or contact details) | Germany |
2. Other Recipients That Are Not Subprocessors
- Stripe also acts as an independent controller for its own legal, compliance and fraud-prevention purposes.
- Apple App Store and Google Play distribute the apps and process data under their own terms.
- AI assistants you connect (such as Claude or ChatGPT) receive data at your direction under the AI Agents and API Terms and their providers' policies.
- ExchangeRate-API (open.er-api.com) supplies currency reference rates to our servers. No personal data is sent.
- Unsplash serves some website images directly to your browser, which receives your IP address and browser information.
- Providers and Customers receive data needed for their Bookings as independent controllers.
3. Changes
We update this page before a new subprocessor begins processing personal data. Business customers who need advance notice of changes can ask for it at privacy@couthacts.com, and may object on reasonable data protection grounds.
Version History
| Version | Date | Summary |
|---|---|---|
| 2026.10.1 | October 21, 2026 | Republished with the 2026.10.1 set; no changes to this document. |
| 2026.10 | October 19, 2026 | First published subprocessor list. |