These are the third parties that process personal information for Doable Link Inc. as part of providing crewduo. Each one is bound by a contract that limits its use of the data to providing its service. This list is part of our Data Processing Addendum. We update it at least 15 days before a new subprocessor starts processing Customer Data. To be notified of changes, email [email protected] with the subject "Subprocessor updates".
Infrastructure and service delivery
| Provider | Purpose | Data | Location |
|---|
| Microsoft Corporation (Azure) | Application hosting, database, file storage (photos, documents), backups, secrets, monitoring and logs | All Service data | Canada (Canada Central, Toronto) |
| Cloudflare, Inc. | DNS, TLS, content delivery, DDoS protection and web application firewall | Traffic passing to and from crewduo, including IP addresses | Global edge network; United States |
| Stripe, Inc. | Subscription billing for crewduo; card and online payments, card readers and payouts for Businesses that accept payments | Billing contacts, payment details, transaction details, Business verification information | United States; global |
| Twilio Inc. | Text messages, voice calls, phone numbers, carrier registration | Phone numbers, message and call content, delivery and opt-out records, Business registration details | United States |
| Resend | Transactional email delivery (sign-in codes, invoices, quotes, reminders, notifications) | Email addresses, names, email content | United States |
| 650 Industries, Inc. (Expo) | Mobile app builds, updates and push notification delivery | Device push tokens, notification content (which can include a client's name and message text) | United States |
| Apple Inc. and Google LLC | Delivering push notifications to iOS and Android devices (Apple Push Notification service, Firebase Cloud Messaging) | Device push tokens, notification content | United States; global |
AI features
| Provider | Purpose | Data | Location |
|---|
| Microsoft Corporation (Azure OpenAI) | AI model processing for the copilot, the setup assistant (including the text of the website address a Business gives it and column mapping of imported files), drafting forms, "Structure with AI" on recommendations, "Suggest" on a visit photo in the mobile app, and the AI receptionist and website chat when a Business turns them on. Not used for model training. | What the person typed, and the Business records the feature needs to answer: for example client names and contact details in copilot answers, service and catalogue item names (up to 40) when structuring a recommendation, the visit photo a technician asks about, the caller's or visitor's messages for the receptionist | Canada (Canada East) |
Mapping
| Provider | Purpose | Data | Location |
|---|
| Microsoft Corporation (Azure Maps) | Turning service addresses into map coordinates; estimating driving times and routes between visits | Addresses being looked up; map coordinates of visit locations (no names) | United States |
| OpenStreetMap Foundation (map tiles) | Displaying maps in the browser | IP address of the viewer's browser, map area viewed | United Kingdom; European Union |
| Esri | Satellite map imagery | IP address of the viewer's browser, map area viewed | United States |
Sign-in
| Provider | Purpose | Data | Location |
|---|
| Google LLC | Optional "Continue with Google" sign-in; web fonts | Name, email address, profile picture (sign-in only); IP address (fonts) | United States |
| Apple Inc. | Optional "Sign in with Apple" | Name and email address, or a private relay address | United States |
Our marketing website
Only on crewduo.com and crewduo.ca, and only for visitors who accept cookies there. This provider receives no Customer Data and is not used in the crewduo web app, mobile app, booking pages or client portals.
| Provider | Purpose | Data | Location |
|---|
| Google LLC (Google Analytics, Google Ads) | Website visit statistics and measuring which of our ads lead to sign-ups and walkthrough bookings. No ad personalization or remarketing. | Pages viewed, buttons used, the ad or link that brought the visitor, browser and device type, approximate location, cookie identifiers; for visitors who sign up, the Google Ads click identifier with the step reached (sign-up, first job, paid) and the amount paid | United States; global |
Integrations a Business chooses
These services receive data only when a Business connects them, and at that Business's direction. The Business's agreement with the provider governs how the provider uses the data.
- Intuit Inc. (QuickBooks Online): clients, invoices, payments, refunds and items the Business syncs.
- Xero Limited (Xero): clients, invoices, payments, credit notes and items the Business syncs.
- Calendar applications (for example Google Calendar or Outlook) that a User subscribes to with their private calendar feed link: visit times, client names and addresses.
- Zapier, Inc.: the records and events the Business chooses to send through its Zapier connection, which can include client names, contact details, jobs and invoices.
- API keys and outbound webhooks: any system the Business connects with its own API keys or webhook endpoints receives the records and events the Business selects, at that Business's direction.