Service provider categories
Version dated 6 September 2026
Boothcore relies on a limited number of specialist service providers. This page explains, by category, why they are needed, which data may be involved and where processing may take place.
1. Services we use
| Category | Purpose | Data involved | Where |
|---|---|---|---|
| Application and database hosting | Running the application and database | Data stored in the platform | European Union |
| Network and security | DNS, traffic delivery, security and spam protection | IP address, request data and security signals | Global network, with transfer safeguards where required |
| File storage | Storing uploaded and generated files | Photos, logos, PDFs, audio and generated images | Files in a European storage region; account and support processing may occur elsewhere |
| Email delivery | Sending transactional messages | Recipient name and email address, subject, message content and any attachments | Primarily the European Union; approved suppliers may process elsewhere |
| Payment processing | Online payments and payouts through the payment account connected by the customer | Name, email address, billing details, amount, payment status, payment method details and, where relevant, IP and device data | European Union, with possible transfers outside the EEA |
| Routing and distance calculation | Geocoding, travel time, distance and route planning | Origin and destination addresses, coordinates and route parameters | Germany |
| Optional AI services | Analysing invitations and generating images when the feature is deliberately used | Submitted images, prompts and references | European Union or elsewhere, with transfer safeguards where required |
2. Service used for the public website
| Category | Purpose | Data involved | Where |
|---|---|---|---|
| Website analytics | Measuring use of boothcore.net, only after consent | IP address, device and page data | European Union, with possible transfers outside the EEA |
Boothcore acts as controller for these analytics. The service is not loaded in the dashboard and does not receive data from customer workspaces.
3. Full list
Existing customers can find the current names, addresses, purposes, data categories, processing locations and when each service is used after signing in under Settings → Legal & privacy. Prospective customers can request the list before entering into an agreement via ✉ E-mail.
4. Transfers outside Europe
When personal data is processed outside the European Economic Area, we use a valid transfer mechanism, such as an adequacy decision or the European Commission's Standard Contractual Clauses, and assess which additional safeguards are required.
5. Changes
If we add or replace a sub-processor, we update the restricted register and inform customers at least thirty days in advance. A customer may submit a reasoned objection within that period.