Sub-processors
Version 2026-10-03 · Last updated October 3, 2026
DRAFT – requires legal review. This list reflects the providers planned for launch and must be confirmed before it is published.
Cherry uses the following third parties to provide the Service. Each processes personal data only on Cherry's instructions and under a written agreement with data protection terms. We give at least 30 days' notice before adding or replacing a sub-processor, as described in our Data Processing Agreement.
| Provider | Purpose | Personal data involved | Location | Status |
|---|---|---|---|---|
| Railway Corporation | Application hosting, managed PostgreSQL database, logs | All data stored in the Service | United States (US East) | Active |
| Cloudflare, Inc. | Private file storage (R2) for photos, encrypted database backups in a separate bucket, content delivery and network security | Photos and attachments; full database backups; IP addresses of visitors | United States and global edge network | Planned |
| Functional Software, Inc. (Sentry) | Error monitoring | Technical data about errors, which may include user IDs and IP addresses (personal data is redacted where possible) | United States | Planned |
| OpenAI, L.L.C. | AI processing for the Cherry booking assistant (reading booking photos and text) | Booking photos and text, client first names | United States | Planned |
| Google LLC | Sign in with Google (optional for salon users) | Name, email address, Google account ID | United States | Active when enabled |
| [Email provider to be selected] | Delivery of sign-in codes, invitations, booking confirmations and reminders | Name, email address, message content | United States | Planned |
| Meta Platforms, Inc. (WhatsApp Business Platform) | Booking reminders and the booking assistant over WhatsApp | Phone number, name, message content | United States and global | Planned |
Questions: privacy@cherry.app