Subprocessors
Last updated: May 22, 2026
1. What this page is
To deliver The Varni, we rely on a small number of carefully chosen third-party services (“Subprocessors”) that process Customer Data on our behalf. This page lists every Subprocessor we currently use, what they do for us, what data they touch, and where they operate.
Each Subprocessor is bound by a written agreement requiring them to process data only on our instructions and to implement appropriate technical and organisational security measures.
2. Current Subprocessors
| Vendor | Purpose | Data | Region |
|---|---|---|---|
| Vercel Inc. | Application hosting, edge network, deployment platform | Request metadata, IP addresses, anonymous analytics | United States (global edge) |
| Neon, Inc. | Managed PostgreSQL database | All Customer Data (kitchen profiles, menus, orders, subscriber records) | United States (US East — AWS) |
| Stripe, Inc. | Payment processing for SaaS subscriptions | Billing contact, card data (handled directly by Stripe — never touches our servers), payment metadata | United States |
| Meta Platforms, Inc. (WhatsApp Business) | WhatsApp messaging for OTP and order notifications | Subscriber phone numbers, message content | United States / Ireland |
| Google LLC | Google Sign-In (OAuth), Google Fonts | Name, email address, profile picture (only when a user chooses Google Sign-In) | United States |
| Zernio (WhatsApp gateway) | Routing of OTP and notification messages to the Meta WhatsApp Business API | Subscriber phone numbers, transient OTP codes, message templates | United States |
3. International transfers
Several of our Subprocessors are headquartered in the United States. Where Customer Data is transferred outside the EU/EEA or UK, we rely on the European Commission's Standard Contractual Clauses and (where applicable) the UK International Data Transfer Addendum, together with the vendor's own certifications such as the EU-U.S. Data Privacy Framework.
4. Notification of changes
We will update this page whenever we add, remove, or replace a Subprocessor. Customers on Pro or Enterprise plans may subscribe to email notifications of these changes by writing to info@thevarni.com. The notification will be sent at least 14 days before the change takes effect, except where a shorter timeline is required for security reasons.
5. Objecting to a Subprocessor
If a Customer has a reasonable, documented objection to a new Subprocessor on data-protection grounds, they may notify us within 14 days of the change announcement. We will work in good faith to provide a commercially reasonable alternative or, failing that, allow termination of the affected portion of the Service.
6. Contact
Questions about our Subprocessors should be sent to info@thevarni.com.