Subprocessors
Last updated September 27, 2026
These are the outside services that store or receive data so NextUp can run: what each one does, what it gets and where. Each may use that data only to provide its service. How we handle personal information overall is in our Privacy Policy, and how we protect it is on our Security page.
DigitalOcean (hosting)
- What it's for
- Runs the NextUp servers and the database.
- Data it gets
- Everything NextUp stores: business accounts, team members, locations and settings, and the names, visit details, phone numbers (deleted within 24 hours unless the customer opted into "Remember me"), and photos (deleted within 24 hours) of customers who join a line.
- Where
- United States (New York area)
DigitalOcean Spaces (backups)
- What it's for
- Stores the nightly database backup, off the server.
- Data it gets
- A full copy of the database as of that night.
- Where
- United States (New York)
Twilio
- What it's for
- Delivers text messages to customers who opt in, and handles their STOP and HELP replies.
- Data it gets
- The customer's mobile number, the text itself (the business and location name, their place in line or wait, and a link to their spot), and any reply they send.
- Where
- United States
Stripe
- What it's for
- Subscriptions, payments, invoices and the billing portal.
- Data it gets
- The business's name, the owner's email address, the number of locations and texts used, and the card details the owner enters directly with Stripe. No customer (walk-in) data.
- Where
- United States
Resend
- What it's for
- Sends account emails: sign-in codes and links, email confirmations, invitations and setup guides, and contact form messages to our support inbox.
- Data it gets
- The recipient's email address and the email's contents. No customer (walk-in) data.
- Where
- United States
- What it's for
- Sign in with Google, only for people who choose it.
- Data it gets
- Google tells us the name, email address and Google account ID of the person signing in, and knows they signed in to NextUp.
- Where
- United States
Google Ads and Microsoft Advertising
- What it's for
- Measuring which of our ads bring businesses that use and pay for NextUp, for businesses that arrived from one of those ads.
- Data it gets
- The ad click ID the platform created, and when that business signed up, started taking check-ins and subscribed. No names, email addresses or customer (walk-in) data.
- Where
- United States
US Census Bureau geocoder
- What it's for
- Checks a location's street address and finds where it is, for its time zone and weather.
- Data it gets
- The street address an owner types for a location. No personal or customer data.
- Where
- United States (US government)
OpenStreetMap Nominatim
- What it's for
- Finds roughly where a location is when the owner gives a town or ZIP code but no street, for its time zone and weather.
- Data it gets
- The town, state and ZIP code an owner types for a location. No personal or customer data.
- Where
- OpenStreetMap Foundation servers (mainly Europe)
US National Weather Service
- What it's for
- The weather shown on TV screens, for locations that turn it on.
- Data it gets
- The location's coordinates, rounded to about a kilometre. No personal or customer data.
- Where
- United States (US government)
Sentry
- What it's for
- Error monitoring: captures unexpected errors in the app and API so we can fix them.
- Data it gets
- Stack traces and technical error details (browser version, Angular component, .NET exception). No customer or billing data is sent; we have disabled sending personally identifiable information.
- Where
- United States
Plausible Analytics
- What it's for
- Privacy-friendly traffic analytics for the marketing pages (nextupwalkin.com).
- Data it gets
- Page URL and referrer, browser type and country — aggregated only. No cookies, no cross-site tracking, no personal data.
- Where
- European Union (Germany)
What's not on the list
NextUp uses Sentry for error monitoring and Plausible for privacy-friendly analytics; both are listed above. No advertising networks, social trackers, third-party fonts or other outside scripts are loaded.
Changes
When we add a service that handles your data, we'll add it here and update the date above. Questions? Email [email protected].