These are the providers we use to run ShootOS. Each one only handles what it needs to do its job, and we stay responsible for them. This page is referenced by our Data Processing Agreement.
Where a location is shown, it is where we have set that provider up. Where none is shown we don't choose a region, so where the data is processed is set by the provider and can include other countries — see that provider's own documentation. Either way your data is stored and processed outside Canada, where it can be reachable by courts and authorities under the law of the country it is in.
Core — every customer
- Railway — application hosting. Everything ShootOS handles passes through it. United States.
- Supabase — the main database: accounts, bookings, client records, messages and invoices. United States.
- Cloudflare — photo and video storage and delivery, and bot screening on public pages, which receives the visitor's IP address.
- Backblaze — encrypted offsite backups of the database. United States.
- Resend — email delivery: recipient addresses and the content of each email.
- Twilio — text messaging: phone numbers and the content of each message, and a company's business details when it registers to send texts. Identity checks in that registration are run inside Twilio's own form by its provider, Persona.
- Stripe — payments and subscriptions: the payer's name and email, and the property address where it appears on an invoice line. We never receive or store card numbers.
- Expo — push notifications to the mobile apps, and app updates. It receives the device token and the notification text, which can include a client's name and a property address. On Android, notifications are delivered through Google's Firebase service.
- Google — maps: property and starting addresses are sent to work out locations and drive times. Fonts: our pages and most of our emails load their fonts from Google, so the reader's browser or mail app contacts Google directly.
AI features
- OpenAI — the booking assistant, the in-app assistant, script and caption writers, onboarding help, and voice-note transcription. It receives what is typed or recorded in those features, and what they look up to answer: booking chat conversations, including the contact details and addresses given in them; client and booking details; voice recordings; images uploaded to import a price list; and check-in answers and staff chat messages used for summaries and reports.
Diagnostics
- Sentry — error monitoring. Error reports from our servers, with request bodies, cookies and user details removed before they are sent.
- PostHog — product analytics. Counts of product events against a company's account number, not against a person. United States.
Only if you connect them
- Google — calendar sync. Events carry the property address, the services booked and the client's name.
- Dropbox — file handling, if you connect your own account. Folders are named with the client name and the property address. Client galleries also offer a button that saves the files to Dropbox, which loads a Dropbox script in the browser of the person viewing the gallery.
- AutoHDR — photo editing, if you turn it on. Photos are placed in a folder in your own Dropbox, named with the street address of the property, which AutoHDR reads; finished edits are fetched back.
- YouTube — if you add a video to your booking page, the player loads from YouTube in the visitor's browser.
Our marketing site only
- Google Ads and Meta — measuring whether our own advertising works, on tryshootos.com only. They are never loaded on a company's booking page or on client galleries, and nothing from inside the product is shared with them. When you create an account, open the demo, register for a webinar or start a trial, we also report that one event to Meta from our server with a hashed (SHA-256) copy of the email you used, your IP address and browser type.
- Zoom — our webinars. When you register for one, your name and email are sent to Zoom to create your place, and attendance is read back.
- YouTube — the videos on our marketing and webinar pages load from YouTube in your browser.
Changes
We'll give 30 days' notice before adding or replacing a provider, by email to account owners and by updating this page.