Subprocessors
Last updated: August 1, 2026
These are the third parties Bizsys Consulting LLC engages to deliver Tableside. Each processes data only to provide its service to us, under contractual terms no less protective than our Data Processing Addendum. We give customers at least 30 days' notice before adding or replacing a subprocessor that handles customer personal information.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Amazon Web Services | Database and file storage | All application data; uploaded images and attachments | United States |
| Salesforce (Heroku) | Application hosting | All application data in transit and at rest | United States |
| Twilio SendGrid | Transactional email delivery | Recipient name and email address; appointment details in the message | United States |
| Twilio | SMS reminders and delivery status | Recipient phone number; message content; delivery metadata | United States |
| Stripe | Subscription billing, and customer appointment payments when a Business connects Stripe | Business account name, email, and payment details. When a Business collects a booking deposit or payment, Stripe also processes the customer's payment details for that Business on the connected account, including a saved card the Business may later charge for the appointment balance. | United States |
| Analytics on our own marketing and application pages | Usage and device information. No appointment or booking details. | United States | |
| Calendar sync (only when a Business connects their Google account) | Customer name, contact details, service, appointment time, staff, extras, and notes, written as events on the Business's chosen calendar. Encrypted refresh token and the connected Google account email, stored by us to keep the connection alive. | United States |
A note on Google
Google has two roles.
Analytics on our own pages. Google is a subprocessor for analytics on our marketing and application pages. That path never receives the service a customer booked, their name, or their contact details. We disable third-party tags entirely on booking pages for businesses in Washington and Nevada. Visitors can opt out through Your Privacy Choices, and we honor Global Privacy Control automatically.
Calendar sync. If you connect a Google account in Settings, we copy that Business's bookings onto the calendar you pick — name, contact details, service, time, staff, extras, and notes. Those events live on your calendar, so anyone you have shared it with can see them. Customers are not added as attendees. Disconnecting stops new writes and removes our access; events already on the calendar stay there. See our Privacy Policy.
If you add your own Google Analytics or Google Ads tag to your booking page, Google is processing that data for you rather than for us, and you are its controller. See Section 10 of the Data Processing Addendum.
Changes and notifications
To be notified when this list changes, email support@booktableside.com and ask to be added to subprocessor notifications. Notice also goes to the email address on your account.