Legal document
Service Providers
This page explains which services Bisux Limited ("we", "us", "our") uses and why. A provider is a subprocessor only when it handles restaurant-controlled personal data for us. Providers used for our own account, sales, billing, support or advertising activities have different roles. Our Privacy Policy and Data Processing Addendum explain that distinction.
1. Hosting, security and email
| Provider | Service and data | Role and location information |
|---|---|---|
| FyfeWeb Ltd | Hosting of servers, databases and files, including accounts, restaurant content, reservations and technical records. | Subprocessor for restaurant data; provider for our own processing. Main hosting is in the United Kingdom. UK adequacy can cover EEA-to-UK transfers; it does not cover onward access in other countries automatically. |
| Cloudflare, Inc. | DNS, Turnstile anti-abuse checks and routing of email sent to bisux.com addresses. Turnstile receives connection/browser information; email routing handles message content. | Provider for our security and email processing; subprocessor where it handles restaurant data on instruction. Cloudflare operates globally, including in the US. DNS alone does not give it all page content. We do not use Cloudflare as the reverse proxy for all website traffic. |
| Amazon Web Services — SES and SNS | Sending account, preview and reservation emails and handling delivery, bounce and complaint feedback. Receives email addresses, messages and delivery information. | Subprocessor for restaurant booking mail; provider for our own mail. Preview sending and feedback use the Stockholm region. That does not mean every email flow or support-access location is in Sweden. |
| Zoho | Bisux.net mailboxes: contact details, correspondence and attachments. | Provider for our correspondence; subprocessor if it handles guest data on a restaurant's instruction. Account region and recipient entity depend on the applicable account arrangements. |
2. Payments and Google connections
| Provider | Service and data | Role |
|---|---|---|
| Stripe | Bisux subscription checkout, payment, billing, fraud prevention and financial obligations. Receives billing, payment and transaction details. | Acts under its processor and independent-controller terms according to the activity. Bisux subscription billing does not make it a general subprocessor for diners' reservations. Processing can involve global operations, including the US. |
| Places searches and restaurant listings; optional Google sign-in and Business Profile connections. Receives search/place references, sign-in details or permissions and business information needed for the chosen connection. | Roles and recipient entities vary by service. Google also operates its own account services. These services use Google's global infrastructure. |
3. Menu import, text generation and translation
| Provider | Service and data | Role and limits |
|---|---|---|
| Google Gemini API | Reads supplied or discovered menus, files and web text, prepares draft menu data and helps locate a restaurant's website. | Provider for our requested-preview activity; subprocessor where it handles customer-directed personal data. Google's paid-service terms exclude using submitted content to improve its products. Search grounding has a separate 30-day retention rule for prompts, context and results for debugging and testing. These terms are not a promise of EU-only processing. |
| OpenRouter, Inc. and the inference provider selected by its route | Short business descriptions and banner text: business name, type, area, language and entered description. | OpenRouter is a US router. The current free model route may allow the inference provider to retain inputs and use them to improve models. A model's author is not necessarily the company serving it. Do not put guest data or personal or sensitive material in these fields. This route is not authorised for restaurant guest-data processing under our DPA. |
We operate our translation model ourselves using Ollama software. Installing that software does not make its developer a separate recipient of translation content. The underlying hosting service still processes the data.
4. Maps and address suggestions
- OpenStreetMap Foundation: map tiles and Nominatim address search. A browser loading maps or searching an address sends connection information and the relevant location or search text. The Foundation is a UK organisation; its services use distributed infrastructure, so that does not establish a UK-only processing location. See its privacy policy.
- komoot GmbH / Photon: address suggestions during sign-up, receiving the query and browser connection information. komoot is a German company; that does not establish where every service request is processed.
These are external browser services, rather than a statement that each operator is our contracted restaurant-data subprocessor.
5. Human support
Dashboard support uses Chatwoot software hosted by us. Chatwoot's software company does not receive conversations merely because we use its software. Our hosting, outbound email and inbound routing providers still handle the relevant support data. Human support is separate from AI text generation. We do not run a guest AI assistant through this support service.
6. Advertising
With advertising consent, we use Meta Pixel and Conversions API on selected Bisux pages, never on restaurant guest websites. Meta receives visit and event information, IP address, browser details and Meta identifiers. For preview requests, waitlist sign-ups and claims, our server also supplies hashed email and an internal reference; the current subscription event does not include those contact hashes. Browser automatic matching has the separate scope explained in our Privacy Policy.
Bisux Limited and Meta Platforms Ireland Limited are joint controllers for collection and transmission under the Controller Addendum and Business Tools joint-processing terms. Meta controls its subsequent uses. Meta is not a restaurant guest-data subprocessor for our advertising. Meta operates internationally, including in the US. See Meta's Privacy Policy.
7. Transfers and provider changes
Transfers outside the EEA require an applicable adequacy decision or another lawful safeguard, such as EU standard contractual clauses with any necessary additional measures. EU–US Data Privacy Framework coverage applies only to covered, currently certified recipients. A provider's public policy does not by itself establish the protection for every service or country. You can ask privacy@bisux.net for information about the safeguards relevant to your data.
Before a new or replacement subprocessor starts processing restaurant data, we update this page and normally give at least 30 days' notice by email. If an urgent replacement is needed to protect security or service continuity, the DPA allows shorter notice, but we still explain the urgency and give you sufficient time to assess the change and object before the new provider processes your data. You may object on reasonable data-protection grounds by replying or writing to privacy@bisux.net. We do not send your data to that provider while an objection remains unresolved. You do not need to accept the Terms again. DPA section 4 explains alternatives, stopping affected processing and termination of the affected service with a proportional unused-period refund under Terms section 9.
Last updated: 10 November 2026
Bisux Limited is an Irish private company limited by shares, registered in Ireland (Companies Registration Office), company number 816985. Registered office: 51 Bracken Road, Dublin, D18 CV48, Ireland. Contact: hello@bisux.net.