# GreetScribe Subprocessor List **Effective date:** 2026-05-17 **Version:** 1.0 **Operator:** Qevinto Oy This Subprocessor List describes service providers and integration providers that may process personal data in connection with GreetScribe. GreetScribe is operated by Qevinto Oy. --- ## 1. Operator **Qevinto Oy** Business ID: 3583823-3 Sarkakatu 3 F23 96460 Rovaniemi Finland Contact: contact@qevinto.com --- ## 2. Scope of this list This list applies to GreetScribe business customers. This list supports the GreetScribe Privacy Policy, SaaS Customer Terms, and Data Protection Addendum. This list covers two categories: 1. **Qevinto service providers** used by Qevinto Oy to provide, secure, host, monitor, bill, support, or improve GreetScribe. 2. **Customer-controlled integrations** selected, configured, or controlled by the customer or provider. Customer-controlled integrations may not be Qevinto-controlled subprocessors in every setup. The exact provider set may depend on the customer configuration, selected integrations, plan, region, and service settings. --- ## 3. Qevinto service providers | Provider | Status | Function | Data categories | Country / region | |---|---:|---|---|---| | UpCloud | Current | Application and website hosting | Application data, technical data, hosting logs | Finland | | Supabase | Current | Database and backend data services | Customer data, guest data, admin data, integration metadata, technical data | Sweden | | OpenAI | Current / configuration-dependent | Chat assistance and recommendations | Guest chat messages, prompts, recommendation context, limited technical metadata | EU or global depending on customer configuration | | Stripe | Current | Qevinto SaaS subscription billing | Billing contact data, payment metadata, subscription data, invoices, transaction records | EU/EEA, United States, and other locations depending on Stripe services and account configuration | | Google / Gmail | Current | Company email and privacy requests | Business contact data, support emails, privacy request emails | EU/EEA, United States, and other locations depending on Google services and account configuration | | Hostinger | Current | Domain hosting and DNS-related services | Domain/account metadata, technical metadata | EU/EEA and other locations depending on Hostinger services and account configuration | | Make.com | Current | Technical error alert automation | Technical error data, correlation IDs, operational alert metadata | EU/EEA and other locations depending on Make services and subprocessors | | WhatsApp / Meta | Current | Technical error alerts | Technical alert messages, correlation IDs, operational notification metadata | EU/EEA, United States, and other locations depending on Meta services and account configuration | | Google Analytics | Current | Analytics | Website usage data, device/browser data, analytics identifiers, event data | EU/EEA, United States, and other locations depending on Google services and account configuration | | Meta Pixel | Current | Marketing measurement | Website event data, browser/device data, marketing identifiers | EU/EEA, United States, and other locations depending on Meta services and account configuration | | TikTok Pixel | Current | Marketing measurement | Website event data, browser/device data, marketing identifiers | EU/EEA, United States, Singapore, and other locations depending on TikTok services and account configuration | | LinkedIn Insight Tag | Current | Marketing measurement | Website event data, browser/device data, marketing identifiers | EU/EEA, United States, and other locations depending on LinkedIn services and account configuration | --- ## 4. Customer-controlled integrations The following integrations may be controlled by the customer, provider, or a third-party account selected by the customer. | Provider / system | Status | Function | Data categories | Control position | |---|---:|---|---|---| | Bokun | Customer-controlled API integration | Activity availability, activity information, activity booking links, provider data | Activity selections, availability data, booking-related data, provider metadata | Customer/provider controlled | | Hostaway | Customer-controlled API integration | Accommodation availability, listings, stay information, provider data | Stay selections, availability data, booking-related data, provider metadata | Customer/provider controlled | | Hospitable | Customer-controlled API integration where enabled | Accommodation availability, listings, stay information, provider data | Stay selections, availability data, booking-related data, provider metadata | Customer/provider controlled | | Customer booking engine | Customer-controlled integration | Customer-managed booking flow | Guest booking data, booking links, payment redirection data | Customer controlled | | Customer payment provider | Customer-controlled integration | Guest booking payments | Guest payment metadata handled outside GreetScribe | Customer/provider controlled | | Customer PMS / CRM | Customer-controlled integration where enabled | Customer-managed hospitality systems | Guest data, booking data, account or operational data depending on setup | Customer controlled | --- ## 5. Provider and payment boundary Guest booking payments are handled by the customer, booking provider, payment provider, or third-party booking system. Qevinto Oy does not receive hotel guest booking payments unless separately agreed in writing. GreetScribe SaaS subscription billing is separate from hotel guest booking payments. Stripe may be used by Qevinto Oy for GreetScribe SaaS subscription billing. Customer or provider payment systems may be used separately for guest booking payments. --- ## 6. OpenAI and LLM processing OpenAI may be used for chat assistance and recommendations. OpenAI may receive guest chat messages. OpenAI is not intended to receive full chat transcripts. OpenAI is not intended to receive guest names, guest email addresses, or guest phone numbers. OpenAI processing may use EU or global processing depending on customer configuration and service settings. Enterprise customers may use alternative or self-hosted LLM arrangements where separately configured. No LLM accepts or rejects bookings. No LLM accepts or rejects payments. --- ## 7. Technical alert processing GreetScribe may use Make.com and WhatsApp / Meta for technical error alerts. These alerts are intended to include: - technical error information; - correlation ID; - operational alert metadata. These alerts are not intended to include: - guest name; - guest email; - guest phone; - guest chat text; - booking/session data. --- ## 8. Analytics and marketing providers GreetScribe may use analytics and marketing technologies. Current analytics and marketing technologies may include: - Google Analytics; - Meta Pixel; - TikTok Pixel; - LinkedIn Insight Tag. These technologies may process website event data, browser/device data, analytics identifiers, and marketing identifiers. Cookie and consent settings may affect whether these technologies are active. A separate cookie notice or cookie settings mechanism should describe exact cookie names, storage keys, purposes, and durations. --- ## 9. International processing GreetScribe’s primary application hosting is in Finland through UpCloud. GreetScribe’s database hosting is in Sweden through Supabase. Some service providers may process data outside Finland or outside the EU/EEA. International processing may depend on: - customer configuration; - vendor account settings; - service settings; - selected integrations; - provider infrastructure; - contractual terms; - customer-selected provider systems. --- ## 10. Updates to this list Qevinto Oy may update this Subprocessor List when providers, integrations, hosting, analytics, billing, alerting, or technical operations change. Updated versions may be published on the GreetScribe website. Customers should review this list periodically. Where a signed agreement gives different notice rights, that agreement controls. --- ## 11. Contact Questions about this Subprocessor List may be sent to: **Qevinto Oy** Sarkakatu 3 F23 96460 Rovaniemi Finland contact@qevinto.com