FaveCard Subprocessors
FaveCard provides digital loyalty cards and wallet passes for businesses, letting end-customers collect stamps and rewards via Apple Wallet and Google Wallet.
- Subprocessors
- 10
- Locations
- 20
- Categories
- 8
- Last scanned
| Name | Category | Purpose | Location | Data processed |
|---|---|---|---|---|
| Google Cloud Platform ↗ DPA | Cloud Infrastructure | Application hosting, serverless compute (Cloud Functions), database (Firestore), file storage (Cloud Storage), static hosting (Firebase Hosting) | Netherlands (europe-west4 Eemshaven) EU multi-region (Netherlands + Belgium) for Firestore US fal | Business-customer account data, end-customer loyalty data, authentication tokens, server logs |
| Apple Push Notification Service ↗ PP | Communications | Delivery of updates to Apple Wallet passes on end-customer devices |
 United States
|
Wallet pass tokens, pass update payloads (business name, stamp count, rewards text) |
| Google Wallet API ↗ DPA | Payment Processing | Generation of Google Wallet passes for Android end-customers | United States (with some EU fallback) | Pass payload (business name, stamp count, rewards text, card identifier), end-customer first name |
| Stripe ↗ DPA | Payment Processing | Processing of subscription payments from business customers; billing; fraud prevention |
Ireland (EU)
United States
|
Business-customer billing identification, payment method token, invoice history; full card numbers and CVV handled by Stripe directly |
| Resend ↗ DPA | Delivery of transactional email (pass-ready emails, password reset, receipts, onboarding) |
United States
|
Recipient email address, recipient first name, email body, delivery status | |
| Sentry ↗ DPA | Error Tracking | Application error monitoring and performance tracing |
EU region (Frankfurt
Germany)
United States
|
Error traces, stack traces, user agent, IP address (truncated), Firebase Auth user identifier |
| PostHog ↗ DPA | Analytics | Product analytics and usage insights for the business dashboard and Flutter app |
United States
 United Kingdom
EU instance (Frankfurt
Germany)
|
Business-customer identifier (pseudonymous), dashboard events, device and browser information, approximate location derived from IP |
| Vercel ↗ DPA | Cloud Infrastructure | Hosting of the public business page and the end-customer card-signup flow | France (cdg1 Paris) for edge primary region United States for build control plane | HTTP request logs, IP address, user agent, form submissions in transit |
| Cloudflare ↗ DPA PP | Security | Bot protection on FaveCard sign-up and waitlist forms (Cloudflare Turnstile) | Cloudflare's global network including outside the EEA | Visitor's IP address, user agent and TLS fingerprint, form site key and page address; no name, email or form content |
| Trustpilot ↗ DPA | Reviews | Review invitations after a business customer buys a paid plan | Denmark (EEA UK) | Buyer's email address, first name, business name and language of the email; no end-customer data |
No subprocessors match your filters.
Your data may flow beyond direct subprocessors. Click to expand and see the chain.
Loading data flow...
No changes recorded yet. Changes will appear here after the next scan detects updates.