Legal
Subprocessors
Last updated October 30, 2026
These are the companies UKU uses to provide the Services that may process personal information on behalf of the businesses using UKU. Each is bound by a contract that limits its use of the data to providing its service to us. Some are used only when a business uses the feature that needs them.
1.Service providers
| Company | What it does for UKU | Data it receives | Location | Used |
|---|---|---|---|---|
| Google Cloud (Google LLC) | Hosting: application servers, database, cache, message queue, file storage, backups, logging and monitoring. | All Service data, including merchant, staff and customer personal information and system logs. | United States (us-central1) | In use |
| Stripe, Inc. | Payment processing, card readers (Stripe Terminal), merchant identity verification, payouts and disputes. | Business and owner details for onboarding, payment amounts and order references, card details entered into Stripe forms and readers. | United States | In use |
| Resend (Plus Five Five, Inc.) | Email delivery: receipts, invoices, eGift cards, sign-in emails and marketing email. | Recipient email address and name, message content (for example order details). | United States | In use |
| Cloudflare, Inc. | DNS, content delivery and network security for ukuos.com, and certificates for custom domains connected to UKU Sites. | Network traffic, including IP addresses and request details; custom domain names. | Global network (United States company) | In use |
| Porkbun LLC | Domain registrar for ukuos.com and forwarding of email sent to our addresses. | Email sent to UKU addresses (for example privacy requests). | United States | In use |
| Anthropic, PBC | AI model (Claude) behind the UKU assistant. | Messages to the assistant and the business data its tools look up to answer, which can include customer names, order notes and reviews. | United States | When the feature is used |
| Twilio Inc. | Text messages (order updates, pay links, marketing) and US carrier registration (10DLC). | Phone numbers, message content, opt-out replies; business registration details (legal name, tax ID, contact). | United States | When the feature is used |
| DoorDash, Inc. (DoorDash Drive) | Courier delivery of orders the merchant sends for delivery. | Customer name, phone number, delivery address and instructions, order details, pickup location. | United States | When the feature is used |
| Uber Technologies, Inc. (Uber Direct) | Courier delivery of orders the merchant sends for delivery. | Customer name, phone number, delivery address and instructions, order details, pickup location. | United States | When the feature is used |
| Otter (Otter Technologies, Inc.) | Brings orders from delivery marketplaces the merchant sells on into UKU, and sends menus back. | Marketplace orders (customer name as the marketplace shares it, items, notes), menus. | United States | When the feature is used |
| Google LLC (Business Profile APIs) | Keeps the merchant’s Google listing (hours, details) in sync and shows Google reviews. | Business listing details, reviews and reviewer display names. | United States | When the feature is used |
| Google LLC (Places API) | Looks up public Google listing details for the free website grader. | The business name and address being graded. | United States | When the feature is used |
| Vercel Inc. | Alternative certificate provider for custom domains, used only if Cloudflare is not. | Custom domain names. | United States | When the feature is used |
2.Planned
Not in use yet. We will move these into the list above, with notice, before they receive any data:
- Plaid Inc.: Bank connections for bookkeeping (planned).
3.Services a business connects itself
When a business connects a third-party AI app (such as ChatGPT by OpenAI, or Claude by Anthropic), a phone-ordering partner, its own integrations or webhooks, or the delivery marketplaces it sells on, UKU sends data to those services on the business’s instruction. They act for the business, under the business’s own agreement with them, and are not UKU’s subprocessors.
4.Changes
We update this page before a new subprocessor starts processing personal information, and change the “last updated” date above. Businesses that want an email when this list changes, or have an objection, can write to [email protected].