Subprocessors
Last updated September 26, 2026
These are the outside services that store or receive data so NextUp can run: what each one does, what it gets and where. Each may use that data only to provide its service. How we handle personal information overall is in our Privacy Policy, and how we protect it is on our Security page.
DigitalOcean (hosting)
- What it's for
- Runs the NextUp servers and the database.
- Data it gets
- Everything NextUp stores: business accounts, team members, locations and settings, and the names, visit details, and (for up to 24 hours) phone numbers and photos of customers who join a line.
- Where
- United States (New York area)
DigitalOcean Spaces (backups)
- What it's for
- Stores the nightly database backup, off the server.
- Data it gets
- A full copy of the database as of that night.
- Where
- United States (New York)
Twilio
- What it's for
- Delivers text messages to customers who opt in, and handles their STOP and HELP replies.
- Data it gets
- The customer's mobile number, the text itself (the business and location name, their place in line or wait, and a link to their spot), and any reply they send.
- Where
- United States
Stripe
- What it's for
- Subscriptions, payments, invoices and the billing portal.
- Data it gets
- The business's name, the owner's email address, the number of locations and texts used, and the card details the owner enters directly with Stripe. No customer (walk-in) data.
- Where
- United States
Resend
- What it's for
- Sends account emails: sign-in codes and links, email confirmations, invitations and setup guides, and contact form messages to our support inbox.
- Data it gets
- The recipient's email address and the email's contents. No customer (walk-in) data.
- Where
- United States
- What it's for
- Sign in with Google, only for people who choose it.
- Data it gets
- Google tells us the name, email address and Google account ID of the person signing in, and knows they signed in to NextUp.
- Where
- United States
Google Ads and Microsoft Advertising
- What it's for
- Measuring which of our ads bring businesses that use and pay for NextUp, for businesses that arrived from one of those ads.
- Data it gets
- The ad click ID the platform created, and when that business signed up, started taking check-ins and subscribed. No names, email addresses or customer (walk-in) data.
- Where
- United States
US Census Bureau geocoder
- What it's for
- Checks a location's street address and finds where it is, for its time zone and weather.
- Data it gets
- The street address an owner types for a location. No personal or customer data.
- Where
- United States (US government)
OpenStreetMap Nominatim
- What it's for
- Finds roughly where a location is when the owner gives a town or ZIP code but no street, for its time zone and weather.
- Data it gets
- The town, state and ZIP code an owner types for a location. No personal or customer data.
- Where
- OpenStreetMap Foundation servers (mainly Europe)
US National Weather Service
- What it's for
- The weather shown on TV screens, for locations that turn it on.
- Data it gets
- The location's coordinates, rounded to about a kilometre. No personal or customer data.
- Where
- United States (US government)
What's not on the list
NextUp's pages load no outside scripts, fonts, analytics, advertising or tracking: our content security policy only lets the browser load NextUp's own files. We don't use a third-party error-tracking or analytics service.
Changes
When we add a service that handles your data, we'll add it here and update the date above. Questions? Email support@nextupwalkin.com.