FaveCard Subprocessors
FaveCard provides digital loyalty cards and wallet passes for businesses, letting end-customers collect stamps and rewards via Apple Wallet and Google Wallet.
- Subprocessors
- 10
- Locations
- 20
- Categories
- 8
- Last scanned
| Name | Category | Purpose | Location | Data processed |
|---|---|---|---|---|
| Google Cloud Platform ↗ DPA | Cloud Infrastructure | Application hosting, serverless compute (Cloud Functions), database (Firestore), file storage (Cloud Storage), static hosting (Firebase Hosting) | Netherlands (europe-west4 Eemshaven) EU multi-region (Netherlands + Belgium) for Firestore US fal | Business-customer account data, end-customer loyalty data, authentication tokens, server logs |
| Apple Push Notification Service ↗ PP | Communications | Delivery of updates to Apple Wallet passes on end-customer devices |
 United States
|
Wallet pass tokens, pass update payloads (business name, stamp count, rewards text) |
| Google Wallet API ↗ DPA | Payment Processing | Generation of Google Wallet passes for Android end-customers | United States (with some EU fallback) | Pass payload (business name, stamp count, rewards text, card identifier), end-customer first name |
| Stripe ↗ DPA | Payment Processing | Processing of subscription payments from business customers; billing; fraud prevention |
Ireland (EU)
United States
|
Business-customer billing identification, payment method token, invoice history; full card numbers and CVV handled by Stripe directly |
| Resend ↗ DPA | Delivery of transactional email (pass-ready emails, password reset, receipts, onboarding) |
United States
|
Recipient email address, recipient first name, email body, delivery status | |
| Sentry ↗ DPA | Error Tracking | Application error monitoring and performance tracing |
EU region (Frankfurt
Germany)
United States
|
Error traces, stack traces, user agent, IP address (truncated), Firebase Auth user identifier |
| PostHog ↗ DPA | Analytics | Product analytics and usage insights for the business dashboard and Flutter app |
United States
 United Kingdom
EU instance (Frankfurt
Germany)
|
Business-customer identifier (pseudonymous), dashboard events, device and browser information, approximate location derived from IP |
| Vercel ↗ DPA | Cloud Infrastructure | Hosting of the public business page and the end-customer card-signup flow | France (cdg1 Paris) for edge primary region United States for build control plane | HTTP request logs, IP address, user agent, form submissions in transit |
| Cloudflare ↗ DPA PP | Security | Bot protection on FaveCard sign-up and waitlist forms (Cloudflare Turnstile) | Cloudflare's global network including outside the EEA | Visitor's IP address, user agent and TLS fingerprint, form site key and page address; no name, email or form content |
| Trustpilot ↗ DPA | Reviews | Review invitations after a business customer buys a paid plan | Denmark (EEA UK) | Buyer's email address, first name, business name and language of the email; no end-customer data |
No subprocessors match your filters.
No changes recorded yet. Changes will appear here after the next scan detects updates.