Legal
Subprocessors
Last updated: 25 June 2026
VenueCore engages the following subprocessors to deliver the platform. We provide 30 days’ notice by email before adding or replacing a subprocessor. To receive change notifications, email support@venuecore.solutions with the subject “Subprocessor updates”.
This page is maintained by VenueCore Ltd to answer common privacy and compliance questions about the VenueCore platform. It is not a certification and does not constitute legal advice. For contract-grade terms, contact support@venuecore.solutions.
| Vendor | Purpose | Data | Region | Transfer |
|---|---|---|---|---|
| Managed Postgres Cloud (EU) | Application hosting, Postgres database, authentication, storage | All platform data (accounts, orders, reservations, audit logs) | EU (Frankfurt) | Intra-EU |
| Cloudflare Workers | Edge compute, SSR, static asset delivery | Request metadata, IP, no persistent storage | Global edge | SCCs |
| Stripe Payments Europe Ltd. | Card-present and online payment processing, Connect payouts | Cardholder data (Stripe-hosted), name, email, payment metadata | Ireland (EU) with US redundancy | EU-US DPF + SCCs |
| Google LLC (Gemini, via Lovable AI Gateway) | AI inference for Copilot, anomaly detection, menu extraction and other AI features | Diagnostic prompts containing venue name, error codes, order IDs (no guest PII) | EU / US | EU-US DPF + SCCs |
| Resend | Transactional email (auth, receipts, invoices) from notify.venuecore.solutions | Recipient email, message content | United States | EU-US DPF + SCCs |
| Stripe Terminal | Card-present hardware (WisePOS E) connectivity | Payment intent metadata, terminal telemetry | EU / global | EU-US DPF + SCCs |
Notes
- DPF = EU-US Data Privacy Framework. SCCs = Standard Contractual Clauses (Commission Decision 2021/914).
- Cardholder data (PAN, CVV) is captured directly by Stripe’s SDK and never touches VenueCore servers.
- AI Copilot is opt-in per venue and is documented to staff not to receive guest PII.
Object to a subprocessor
Customers may object to a new subprocessor on reasonable data-protection grounds within 30 days of notification. Email support@venuecore.solutions.