Last updated: 2026-10-13
To run BookVoya we rely on a small number of infrastructure providers. This page lists every one of them, what data each can reach, and where they operate. It is part of our Data Processing Terms.
Several entries below are conditional: the provider is only involved if a specific feature has been switched on. Where a feature is currently off, the table says so plainly rather than implying the integration is live.
| Provider | Role | What it can reach | Location |
|---|---|---|---|
| Hetzner Online GmbH | Server hosting and the PostgreSQL database, which run on our own rented machine | All application data at rest: accounts, bookings, client records, uploaded images, and any stored messages | Germany (EU) |
| Natro / kurumsaleposta.com | Domain registration and the mailboxes behind our @bookvoya.com addresses |
Email you send us, and our replies | Türkiye |
| Let's Encrypt (ISRG) | TLS certificates for HTTPS | No personal data — issues certificates for the domain only | USA |
| Provider | Role | What it can reach | Current status |
|---|---|---|---|
| Resend (Resend, Inc.) | Delivery of transactional email: account verification, password reset links, booking notifications | Recipient email address and the content of that message. Sending only — it cannot read your mailbox or reach our database. | Enabled. Messages are processed in Resend's EU (Ireland) region; the company itself is US-incorporated. |
| Meta Platforms (Instagram) | Instagram Login, and access to direct messages and to comments on the artist's own posts, for an artist who connects their own account | The connected account's messages, the comments on its posts, and profile identifiers | Only for artists who have explicitly connected an Instagram account. A message or comment reply is sent only when the artist writes or approves it; nothing is sent or posted automatically. |
| OpenAI, L.L.C. (AI model provider) | Generating reply drafts, booking-brief summaries and content suggestions | Only the text submitted for that one request, for example a client's messages and the booking details needed to draft a reply. No account credentials, no database access. | Enabled. USA. Under OpenAI's API terms, data sent through the API is not used to train its models, and we have not opted in to any data sharing. OpenAI may keep API data for up to 30 days for abuse monitoring. AI features run only when they are used, and the artist can switch the AI assistant off in Settings. |
| Paddle.com Market Limited (online reseller, Merchant of Record) | Checkout, payment processing, sales tax/VAT, invoices, subscription billing and refunds | The buyer's name, email, billing address and payment details, collected by Paddle directly — we never receive or store card numbers. Paddle shares the plan, subscription status and buyer email with us. | Enabled. UK. Paddle acts as the seller of record and processes payment data as an independent controller under its own privacy notice. |
For the avoidance of doubt, BookVoya does not use any external analytics provider, advertising network, tracking pixel, data broker, session-recording tool, or customer-data platform. Product measurement is first-party and anonymous — see Cookies & Measurement.
If we add or replace a subprocessor that can reach personal data, we update this page. Artists who have a data processing agreement with us can object as described in the Data Processing Terms. To be told about changes, email privacy@bookvoya.com and ask to be notified.