Legal
Subprocessor List
Effective April 6, 2026 · Last updated August 3, 2026
This page lists the third-party service providers ("Subprocessors") that Branded Bites LLC ("Branded Bites") may engage to process personal information of restaurant guests ("Guest Data") on behalf of our restaurant customers. This list is maintained in accordance with Section 6 of our [Data Processing Addendum](/dpa). We will update this list at least 30 days before adding or replacing a Subprocessor that processes Guest Data.
Current Subprocessors
| Subprocessor | Location | Service Provided | Data Processed |
|---|---|---|---|
| Resend | United States | Transactional and notification email delivery | Restaurant contact email addresses for demo and account notifications |
| Google LLC (Google Analytics) | United States | Website analytics (marketing site only, with consent) | Website visitor data (pages visited, session data, approximate location) |
| Stripe Inc. | United States | Payment card processing for restaurant guest orders | Payment card data (tokenized), transaction amounts, billing address |
| Toast Inc. | United States | POS integration — order data sync for Toast-enabled restaurants | Order data, menu data, location data for configured restaurants |
| Uber Technologies (Uber Direct) | United States | Delivery fulfillment handoff | Order details, delivery address, guest contact for applicable delivery orders |
| DoorDash Inc. (DoorDash Drive) | United States | Delivery fulfillment handoff | Order details, delivery address, guest contact for applicable delivery orders |
| AWS Inc. | United States | Application hosting, database, and storage | All Platform data categories |
| Twilio Inc. | United States | SMS message delivery for restaurant marketing campaigns | Guest phone numbers, message content, delivery status |
| Resend | United States | Email delivery for restaurant marketing campaigns | Guest email addresses, message content, delivery status |
| OpenAI Inc., Anthropic Inc., and Google Inc. | United States | AI-powered analytics, content generation, and recommendations | Aggregated and pseudonymized order and campaign data |
| Customer Support Platform | United States | Customer support ticketing and communications | Support communications from restaurant account holders |
Changes to This List
We will provide at least 30 days' advance notice to restaurant customers before adding or replacing a Subprocessor that processes Guest Data. Notice will be provided by updating this page and by email to the primary account contact for affected restaurant accounts.
Restaurant customers who have signed our Data Processing Addendum may object to a new Subprocessor within 14 days of notice as described in Section 6 of the Data Processing Addendum.
Questions
For questions about our Subprocessors or our data processing practices, contact us at support@brandedbites.app or at 444 W Lake St, Chicago, IL 60606.