Current subprocessors
| Provider | Role | Data it may process |
|---|---|---|
| Meta Platforms (WhatsApp Business Platform) | WhatsApp message delivery and business messaging APIs | WhatsApp messages, phone numbers, delivery metadata |
| OpenAI | Generating AI receptionist replies | Conversation text needed to answer, salon knowledge (services, hours, FAQs) |
| Vercel | Application hosting | All application traffic in transit |
| Cloudflare | DNS, TLS termination and CDN in front of saponly.com | All web traffic in transit, including IP addresses |
| Supabase | Postgres database hosting | Salon, customer, booking and conversation records at rest |
| Resend | Transactional email | Email addresses and message contents of emails we send you |
| Payoneer | Hosted payment page for Saponly invoices, if you choose to pay by card | The payment details you enter on their page. Saponly never receives or stores card details. |
| cron-job.org | Scheduled triggers (reminders, digests) | No customer data — it only calls our endpoints on a schedule |
Payments
Billing is manual: nothing is charged automatically, there is no subscription checkout, and Saponly never collects or stores card details. If you choose to pay an invoice by card, the Pay button hands you to Payoneer’s own hosted page and your card details go to Payoneer, not to us. Where local bank-transfer details are available you can pay that way instead and no payment provider is involved at all.
Who processes this data
You are contracting with Saponly, a trading name of an unincorporated sole proprietorship operated by Shakib. It is operated from Bangladesh, and has no office or registered address in the UAE or elsewhere in the Gulf. These terms are governed by the laws of Bangladesh.
Every provider above is contracted by us, not by you, and we remain your point of contact for all of them. We are a small operation, which is a reason to be more specific about this list rather than less: it is short because the product genuinely uses few services, and adding one to it happens before the provider starts processing anything, not after.
Questions
We designed Saponly with privacy and control in mind. For formal compliance requirements or questions about any provider on this list, contact us.