Who else touches the data.
Expenety is operated by BKPCELA d.o.o., Ostrogovićeva ulica 10, 10000 Zagreb, Croatia. These are the companies that process booking data on our behalf, what each one is for, and where they run it. If we add one, this page changes first.
| Company | What it does for us | Where |
|---|---|---|
| Supabase, Inc. | Holds the record itself: the database your booking is written to, the files and photos, and the backups. One private store, one folder for each business. | United States, in the us-east-1 region |
| Fly.io, Inc. | Runs the app at app.expenety.com: the screens a business on the system logs into, the booking pages we run for companies, and the clock that sends the booking emails. | United States, Fly's iad region |
| Cloudflare, Inc. | Hosts this site and its booking page, runs the code behind them, and carries the connection between the page and the record. It also still holds a copy of the booking record from before 2 September 2026. Nothing writes to that copy any more. | United States, and its global network |
| Resend | Sends the email: your confirmation with a calendar invite, your reminders, the question the day before, one email if you pick a time and do not finish, and the notice to the business you booked with. | United States |
| Twilio | Checks that a booked phone number is a real, reachable number (Twilio Lookup). Answers our phone lines, and records and transcribes a voicemail left on one. Texts the business's own office about its bookings. Texts to homeowners are switched off: it sends them none. | United States |
| Telnyx | The second sender for texts to the business's own office, used when Twilio is not set up or will not take a message. It sends no texts to homeowners. | United States |
| Google (Calendar) | Puts each call or visit booked through the system on the calendar of the business that connected its own Google Calendar, with the customer's name, address and phone, and reads only which times are busy. | United States |
| OpenStreetMap Foundation (Nominatim) | Turns a booked street address into a point on the map, so the drive between two visits can be measured and a service area drawn from where bookings actually are. It is sent the address and nothing else. | United Kingdom |
| Stripe, Inc. | Holds the card of a business on the system and charges its monthly fee. It never sees a homeowner's details. | United States |
| xAI Corp. | Two jobs. It answers a business owner's plain question about their own numbers: every name, phone number, email address and street address is swapped for a placeholder before the request leaves us, and swapped back in the answer on this side, and a test in our build fails if a real name or number ever reaches the request. Under our contract with them they keep nothing after answering: the request is not stored and is not used to train their models. It also turns a business's own job photos into short ad videos. | United States |
| Google (Gemini) | Drafts and edits a business's ad pictures from its own job photos. It is never sent a homeowner's own photo or any booking details. | United States |
| Meta Platforms | Measures the ads that paid for the page. Told that a booking happened, never who you are: any phone or email is hashed before it leaves us. | United States |
| Google (Ads) | The same, for ads bought on Google. It receives the click identifier and the fact of an appointment, and no name, phone or email at all. | United States |
Who is not on this list
Nobody else. We do not use a data broker, an enrichment vendor beyond the phone check above, an analytics product that profiles visitors, or an advertising network other than Meta and Google Ads. Page views are counted without any identifier at all.
The business you booked with
The contractor is not a subprocessor. They are the business you booked with, they decide what they do with your details once we hand them over, and they are responsible for that in their own right. The one practical consequence worth saying out loud: once your booking is in their inbox, it is theirs, and asking us to delete something cannot reach it. Ask them too.
Changes
This page carries the current list. If you are a business on the system, we tell you before we add a company to it, so you can object. When the list changes, the date below changes with it.
Last updated 27 September 2026.