Last updated: June 2026 — Schedaddle Limited Liability Company
These are the third-party vendors ("sub-processors") that store or process personal data on our behalf to deliver the Service. Each is bound by a data-processing agreement and may use data only to provide its service to us. We never share employee data with third parties for advertising.
| Vendor | What they do | Data they process | Location |
|---|---|---|---|
| Vercel | Web hosting, edge delivery, and scheduled jobs | All web-app request traffic; application secrets | United States |
| Supabase | Database, authentication, and file storage | All tenant data and personal data at rest; auth credentials | United States * |
| Stripe | Subscription billing | Billing contact and customer identifiers (card data handled entirely by Stripe) | United States / global |
| Resend | Transactional email | Recipient email addresses; schedule and invite content | United States |
| Optional sign-in (OAuth) and optional Calendar sync | OAuth identity (email, name); shift data if Calendar is connected | Global | |
| Expo / EAS | Mobile and kiosk app builds; push delivery | Build artifacts; push notification tokens | United States |
* Data residency: hosting reflects our current configuration. For regulated customers we confirm the exact processing region and provide each vendor's current compliance reports (e.g., SOC 2 / ISO 27001) on request — email privacy@schedaddle.co.
We use the technologies below on our public marketing site (and, for product-usage analytics, within the app) to measure visits and account-signup conversions so we can run and improve our marketing. The only personal data shared with advertising platforms is hashed identifiers (email and/or IP address) of the person creating an account — a prospective customer — used solely to measure and optimize our advertising. We do not share employee or scheduling data with advertising platforms.
| Vendor | What they do | Data they process | Location |
|---|---|---|---|
| Google (Analytics 4 & Google Ads) | Website/product analytics and advertising-conversion measurement | Marketing-site visitor activity; hashed email for account signup/purchase conversions | Global |
| Microsoft (Clarity & Advertising/UET) | Website session analytics and advertising-conversion measurement | Marketing-site visitor activity; input-masked session recordings; hashed email for conversions | United States / global |
| Meta Platforms (Pixel & Conversions API) | Advertising-conversion measurement and retargeting | Marketing-site visitor activity; hashed email and IP for account signup/purchase conversions | United States / global |
| Reddit (Pixel & Conversions API) | Advertising-conversion measurement | Marketing-site visitor activity; hashed email for account signup/purchase conversions | United States / global |
| PostHog | Product usage analytics | In-app usage events; input-masked session recordings tied to account user IDs | United States |
Customer-authorized integrations. Some features connect Schedaddle to a system you choose (for example, a point-of-sale or payroll provider such as Roller or QuickBooks). Those exchanges happen only when you enable them and are governed by your agreement with that provider; they are data flows you initiate, not sub-processors we route all data through.
Changes. We will update this page before engaging a new sub-processor that handles personal data, so you have the opportunity to object on reasonable data-protection grounds, as described in our Data Processing Addendum.