Trust & safety
Sub-processors
The sub-processors PointMintz uses to deliver the service to tenants. A sub-processor is a third party we engage to process personal data on behalf of a tenant (the controller); every sub-processor is under written contract with confidentiality and data-protection terms, and EEA/UK/Switzerland transfers rely on the EU Standard Contractual Clauses (Module 3, 2021/914) and the UK International Data Transfer Addendum.
Last updated: 2026-08-05. We give tenants at least 30 days' notice before adding a material new sub-processor; tenants who object during that window may terminate the affected service line per the DPA.
Current sub-processors
| Sub-processor | Purpose | Data shared | Location | Sub-DPA / Privacy |
|---|---|---|---|---|
| Microsoft Azure | Primary application hosting (Azure VM), tenant database storage, and operational telemetry | Tenant + customer PII, booking data, communication logs, technical logs | United States | Microsoft DPA |
| DigitalOcean | Off-host encrypted database backup storage (DigitalOcean Spaces, continuous litestream replication) | Tenant + customer PII, booking data, communication logs (encrypted backup snapshots) | United States | DigitalOcean DPA |
| Stripe | Platform subscription billing (PointMintz) + tenant payment processing (tenant merchant-of-record) | Saved payment references, billing email + name, transaction metadata (no full PAN — PCI SAQ-A coverage) | United States | Stripe DPA |
| Mailchimp Transactional (Mandrill) | Primary transactional visit email delivery (confirmations, reminders, receipts) | Recipient email, message content, delivery + bounce/complaint telemetry | United States | Mailchimp DPA |
| Azure Communication Services (ACS) | Primary transactional SMS delivery (visit reminders, confirmations, two-way messaging) | Recipient phone, message content, delivery telemetry | United States | Microsoft DPA |
| Postmark / Twilio | Fallback transactional email (Postmark) and fallback SMS (Twilio) delivery when configured | Recipient email / phone, message content, delivery telemetry | United States | Postmark DPA · Twilio DPA |
| Twilio | Fallback SMS delivery on tenants who supply their own Twilio account | Recipient phone, message body, delivery telemetry | United States (tenant-managed) | Twilio DPA |
| Resend / SendGrid | Transactional email transport fallback when enabled by operations or tenant override | Recipient email, message content, bounce + complaint metadata | United States / European Union | Resend DPA · Postmark DPA · SendGrid DPA |
| Cloudflare | DNS, CDN, TLS termination for custom tenant domains (tenant-authorized) | IP address, request metadata, TLS handshake telemetry | Global edge (data-in-transit only) | Cloudflare DPA |
| GoDaddy / Sectigo | Domain registration + TLS certificate issuance for tenant custom domains | Registrant contact (tenant-supplied), domain ownership records | United States | GoDaddy DPA |
| Intuit QuickBooks (optional) Opt-in | Accounting + bookkeeping export — only enabled per tenant via the QuickBooks integration toggle | Booking totals, line items, tax + tip totals, customer name (when tenant opts in to customer-detail export) | United States | Intuit DPA |
| Microsoft Entra ID (optional) Opt-in | Optional single sign-on (SSO) for enterprise tenants when configured | Authentication identifiers, email, claims | United States | Microsoft DPA |
| Meta Platforms (optional) Opt-in | Server-side ad conversion matching (Meta Conversions API) — only when the business enables ad conversion tracking | Hashed (SHA-256) email address only — never a phone number — plus click-attribution identifiers (fbclid/fbp/fbc) | United States | Meta DPT |
| Google Ads (optional) Opt-in | Server-side ad conversion matching (Google Enhanced Conversions) — only when the business enables ad conversion tracking | Hashed (SHA-256) email address only — never a phone number — plus click-attribution identifiers (gclid/wbraid/gbraid) | United States | Google Ads Data Processing Terms |
How to be notified of changes
Material additions or changes to this list are announced 30 days in advance via the platform admin notifications feed and (for paying tenants) by email to the billing contact on file. The full audit history is available on request from privacy@pointmintz.com.
Tenants who require a signed Data Processing Agreement (DPA) backed by the 2021/914 Standard Contractual Clauses or the UK IDTA can request templates at the same address - see Privacy Policy, International transfers for the in-product references.