Our
sub-processors.

Vowly Event uses a small, deliberately curated set of service providers (sub-processors) to run the platform. Under our Data Processing Addendum you grant general authorisation for the sub-processors listed here. We update this page whenever a provider is added, removed or changed, and give account holders 30 days' prior notice of additions by email, with the right to object.

The following providers process personal data on our behalf:

• Google Ireland Limited / Google LLC (Google Cloud & Firebase) — database (Cloud Firestore, EU multi-region: Belgium & the Netherlands), file storage (Cloud Storage, EU multi-region), serverless backend (Frankfurt), hosting/CDN, sign-in (Firebase Authentication, operated from US data centres), push notifications, abuse protection (App Check / reCAPTCHA) and consent-gated analytics (GA4). Safeguards: Google's Data Processing and Security Terms with EU SCC modules and the EU–US Data Privacy Framework
• Stripe Payments Europe Ltd (Ireland) — card payments and subscription billing on the web; card numbers never touch our servers. Safeguards: Stripe DPA, EU/UK processing
• Apple Inc. (US) — App Store distribution and in-app purchase processing for iOS; receipt validation. Safeguards: Apple's developer terms and EU-approved transfer mechanisms
• Google LLC — Google Play (US) — Play Store distribution and in-app purchase processing for Android; purchase validation. Safeguards: Google Play terms with SCCs
• Resend Inc. (US) — transactional email: invitations, RSVP confirmations, verification codes, account notices, and email-only data exports. Safeguards: EU Standard Contractual Clauses
• Crisp IM SARL (France) — live-chat support; loaded only after your consent or when you open the chat. Data hosted in the EU
• Functional Software, Inc. (Sentry, US) — error monitoring on our web surfaces; configured to send no personal identifiers. Safeguards: EU SCCs
• Cloudflare, Inc. (US) — DNS resolution for our domains; site traffic itself is served by Google's network
• Hostinger (EU) — mailbox hosting for our support email correspondence

For completeness: the organiser music search is powered by the Spotify Web API (Spotify AB, Sweden), but only the search text and a country code ever leave our servers — no name, account or device information is sent. Self-hosted invitation fonts are served from our own domain, so guests' IP addresses are never shared with a fonts CDN.

When we plan to add or replace a sub-processor that handles personal data, we update this page and notify account holders by email at least 30 days in advance. If you object on reasonable data-protection grounds, contact support@vowly.co before the change takes effect and we will work with you on a solution — including, where appropriate, ending the subscription with a pro-rata refund.