Sub-processors

These companies help NOZAIA run the platform and may process the data of salons and their clients. Each is bound by a contract that protects the data at least as well as our Data Processing Agreement. We announce a new sub-processor at least 30 days in advance, here and by email to salon owners.

Supabase

  • Company: Supabase, Inc. (United States)
  • What for: Database, file storage and sign-in: all salon and client data is stored here.
  • Where the data is: European Union (Frankfurt, Germany)
  • Safeguard: Data stored in the EU. Support access from the US under the EU Standard Contractual Clauses.

Vercel

  • Company: Vercel Inc. (United States)
  • What for: Hosting of the website, the dashboard and the server functions.
  • Where the data is: European Union (Frankfurt, Germany); static pages via a worldwide network
  • Safeguard: EU-US Data Privacy Framework and the EU Standard Contractual Clauses.

Resend

  • Company: Resend, Inc. (United States)
  • What for: Sending emails: booking confirmations, reminders and the salon's own campaigns.
  • Where the data is: European Union (Ireland)
  • Safeguard: Emails are sent from the EU region. EU Standard Contractual Clauses for support access.

Anthropic

  • Company: Anthropic, PBC (United States)
  • What for: The AI features (NOZAIA AI in the dashboard, ZIA on the salon page, the switch-over scan). Only the data needed for one answer is sent, only when someone uses the feature.
  • Where the data is: United States
  • Safeguard: EU Standard Contractual Clauses. Not used to train models under Anthropic's commercial terms.
  • When: Only when the salon or its clients use an AI feature.

Stripe

  • Company: Stripe Payments Europe, Ltd. (Ireland)
  • What for: The salon's NOZAIA subscription. For payments by clients, the salon has its own contract with Stripe (Stripe Connect); Stripe is then not a sub-processor of NOZAIA but a party the salon chose.
  • Where the data is: European Union (Ireland), with transfers to Stripe, Inc. (United States)
  • Safeguard: EU-US Data Privacy Framework and the EU Standard Contractual Clauses.

Payment services the salon chooses itself

For payments by clients, a salon links its own account with a payment service. The salon has its own contract with that service, so these are not sub-processors of NOZAIA. NOZAIA only sends what is needed to start a payment.

Questions or objections: info@nozaia.nl

Sub-processors | NOZAIA