Sub-processors
Every provider that processes data for Clefs, what it receives, and where the processing happens.
Last updated 2026-10-18
Providers that receive personal data
These providers receive personal data of guests, hotel staff, enquirers or website visitors, only for the purpose shown. Each is bound by a data processing agreement with Clefs.
| Provider | Purpose | Personal data | Where |
|---|---|---|---|
| Neon | Primary database (PostgreSQL) for all hotel data Regional hosting is available when a hotel's contract requires it. | Guests, Hotel staff, Enquiries | Singapore |
| Vercel | Hosting for the website, console and guest pages | Guests, Hotel staff, Website visitors | Global edge network; United States |
| OpenAI | AI processing for the guest assistant, phone assistant, brief and document reading Guests consent to this transfer before the assistant starts. | Guests, Enquiries | United States |
| Meta (WhatsApp Business Platform) | WhatsApp messages to guests and owners | Guests, Hotel staff, Enquiries | United States and Ireland |
| Resend | Email: briefs, receipts and sign-in links, and mail forwarded to Clefs | Guests, Hotel staff, Enquiries | United States |
| Twilio | SMS and phone numbers | Guests, Hotel staff | United States |
| MSG91 | SMS to Indian (+91) phone numbers, such as staff alerts Used only for +91 numbers; other SMS goes through Twilio. | Guests, Hotel staff | India |
| Microsoft Clarity | Session analytics (clicks and scrolls) on the marketing website only Not loaded in the console, guest pages or staff devices. | Website visitors | United States |
| Calendly | Demo calls booked from this website Only when you book a call. | Enquiries | United States |
| Google (Gmail) | Email between Clefs and the hotels it contacts, including replies Business contact details only, never guest data. | Enquiries | Google data centres worldwide |
Providers that receive no personal data
These services receive hotel names, dates and public questions only. No guest or staff details are sent to them.
| Provider | Purpose | Personal data | Where |
|---|---|---|---|
| SerpApi | Google Hotels prices and positions for your hotel and competitors Receives hotel names and dates only. A third-party service; prices are indicative. | No personal data | United States |
| Places and Business Profile data for your own listing | No personal data | United States | |
| Perplexity | AI answer checks for how assistants describe your hotel Sends questions about hotels only, never guest data. | No personal data | United States |
International transfers
Today our database runs in Singapore and AI processing runs in the United States. Regional hosting is available when your contract requires it. Moving the database does not move AI processing out of the United States, so guests are asked to consent to that transfer before the assistant starts.
The data-flow diagram shows which flows go to Singapore and the United States.
Changes to this list
We update this page before a new provider starts processing personal data, and we tell hotels with an active contract by email. A hotel may object to a new provider under the terms of the data processing agreement.