Purpose
This page lists the sub-processors (other processors) that Glanevo SRL uses to provide the service, in accordance with Article 28(2) and (4) GDPR.
Sub-processor list
The following providers process personal data on Glanevo's behalf. Transfers outside the European Economic Area are based on an adequacy decision or on standard contractual clauses (see section 6 of the Privacy Policy). Integrations that the salon opens with its own accounts — a payment provider, shipping, accounting, a calendar and the like — are not part of this list: there the salon chooses the provider and concludes the contract itself.
Infrastructure & hosting
| Provider | Purpose of processing | Region | Data category |
|---|
| Vercel Inc. | Hosting, content delivery (CDN), file storage (Vercel Blob) and routing of AI requests (AI Gateway) | US / EU | App traffic, IP address, device data, uploaded files (photos, documents), content sent to AI features |
| Neon Inc. | PostgreSQL database, backups (point-in-time recovery) | EU (Frankfurt) | All salon data (clients, appointments, payment metadata) |
| Upstash Inc. | Redis cache and rate limiting | EU | Session and request metadata (short-lived) |
| Inngest Inc. | Background jobs (reminders, scheduled tasks) | US / EU | Job metadata (ID references) |
| Hostinger International Ltd. | E-mail server for glanevo.com addresses | EU (Lithuania) | E-mail messages and sending metadata |
Payments
| Provider | Purpose of processing | Region | Data category |
|---|
| Stripe Inc. | Subscription and card payments | US / EU | Billing address, card token, subscription status |
Communication — SMS · e-mail · messaging
| Provider | Purpose of processing | Region | Data category |
|---|
| Twilio Inc. | SMS (including Romania), WhatsApp and voice | US / EU | Phone number, message content |
| Resend Inc. | Transactional e-mail | US | E-mail address, message content |
| Meta Platforms Ireland Ltd. | WhatsApp and Instagram messaging, only if the salon enables the integration | EU / US | Phone number or account identifier, message content |
| Telegram FZ-LLC | Telegram messaging, only if the salon connects its own bot | Outside the EEA (United Arab Emirates) | Phone number or account identifier, message content |
Artificial intelligence (depending on the feature)
| Provider | Purpose of processing | Region | Data category |
|---|
| Anthropic PBC | AI assistant (Claude) | US | Content sent by the feature in use |
| OpenAI LLC | AI models (GPT) | US | Content sent by the feature in use |
| xAI Corp. | AI models (Grok) | US | Content sent by the feature in use |
| Groq Inc. | AI inference platform (Llama models) | US | Content sent by the feature in use |
| Mistral AI SAS | AI models, used as a fallback when the primary model is unavailable | EU (France) | Content sent by the feature in use |
| Meta Platforms, Inc. (Llama models via Vercel AI Gateway) | AI models (Llama), used when the free-model mode is switched on | US / EU | Content sent by the feature in use |
Notifications, maps, analytics & monitoring
| Provider | Purpose of processing | Region | Data category |
|---|
| Google LLC | AI (Gemini), maps, push notifications | US / EU | Device token, content sent by the feature in use, map queries |
| Apple Inc. | Push notifications | US | Device token |
| PostHog Inc. | Usage analytics and page-speed measurement for the salon panel, only with consent | EU (default endpoint) / US | User identifier, usage events, device data |
| Sentry (Functional Software Inc.) | Error monitoring | US / EU | Error reports (personal data minimised) |
Change notification
We announce the addition or replacement of a sub-processor at least 30 days in advance, by e-mail or in the panel. If you object and we cannot resolve your objection, you can terminate the contract without extra cost.
