ProValet Sub-Processors
Version 2.0 · Effective August 28, 2026. Supersedes Version 1.0, dated February 14, 2025.
To support ProValet in delivering its Service, Pure Coastal Technologies, Inc. (“ProValet”) engages third-party service providers to assist with data processing activities. When we work with these providers in our capacity as a data processor, that provider is a sub-processor of ProValet (a “Sub-processor”).
This page is referenced by the Privacy Policy and by the Platform, Technician, and Customer Terms of Service. It is the authoritative list.
How to read this page. The Customer PI column tells you whether that Sub-processor may receive personal information about a service company’s customers, technicians, or homeowners. Where it says No, that provider handles only ProValet’s own business, marketing, or website data and never touches your customers’ records.
Legend: † Tied to use of the ProValet Payments Service · * Tied to optional, opt-in features within ProValet · ◆ Marketing and website only — no access to ProValet application data
All Sub-processors below process data in the United States unless otherwise noted.
| Sub-processor | Purpose | Customer PI |
|---|---|---|
| Heroku (Salesforce, Inc.) | Application hosting and platform infrastructure | Yes |
| Wasabi Technologies, Inc. | Object storage for files, photos, and documents | Yes |
| Sub-processor | Purpose | Customer PI |
|---|---|---|
| Anthropic, PBC | Large language model processing for the in-application assistant, data import and mapping, summarization, drafting, and — where a service company enables it — automated responses and scheduling actions | Yes |
| OpenAI, L.L.C. | Large language model processing for AI-assisted features | Yes |
We contractually require our AI Sub-processors to process information solely to provide services to ProValet, to maintain appropriate safeguards, and not to use the information to train their generally available AI models. AI providers may retain information for a limited period for abuse detection and legal compliance; see the Data Retention section of the Privacy Policy for detail.
| Sub-processor | Purpose | Customer PI |
|---|---|---|
| Stripe, Inc. † | Payment processing, including card and bank payment authorization and settlement | Yes |
| Sub-processor | Purpose | Customer PI |
|---|---|---|
| Twilio Inc. | SMS and text message delivery to customers and technicians | Yes |
| Brevo (Sendinblue) | Transactional email delivery | Yes |
| Expo (650 Industries, Inc.) | Mobile push notification delivery | Yes |
| Apple Inc. | Push notification transport (APNs) | Yes |
| Google LLC | Push notification transport (Firebase Cloud Messaging) | Yes |
| Sub-processor | Purpose | Customer PI |
|---|---|---|
| Intuit Inc. (QuickBooks) * | Accounting integration for service companies. Where a service company connects QuickBooks, customer invoices and payment records are synchronised to that company’s QuickBooks account | Yes |
| Sub-processor | Purpose | Customer PI |
|---|---|---|
| PostHog, Inc. | Product analytics and error diagnostics. Configured so that it does not receive names, email addresses, telephone numbers, or postal addresses; events are keyed to a pseudonymous account identifier | Limited — pseudonymous identifier only |
| Bugsnag (a SmartBear company) | Application crash and error monitoring, with data redaction | Limited |
| Scout APM | Application performance monitoring | Limited |
| Sub-processor | Purpose | Customer PI |
|---|---|---|
| Slack Technologies, LLC | Internal team notifications | Incidental only |
These providers support ProValet’s own marketing and sales to prospective customers. They have no access to the ProValet application, the mobile applications, or any service company, technician, or homeowner records. Information processed here is limited to prospective-customer contact details submitted through our website or provided with consent. Use of these technologies may constitute a “sale” or “share” of personal information under some state privacy laws; see the Privacy Policy for your opt-out options.
| Sub-processor | Purpose | Customer PI |
|---|---|---|
| Google LLC ◆ | Google Analytics and Google Tag Manager — website traffic measurement | No |
| Meta Platforms, Inc. ◆ | Website advertising and lead generation | No |
| GoHighLevel, Inc. (HighLevel) ◆ | Customer relationship management, marketing automation, lead capture, appointment scheduling, and AI-assisted email and text responses to prospective customers who have opted in | No |
| Calendly LLC ◆ | Scheduling demonstrations and meetings with prospective customers | No |
We will provide at least thirty (30) days’ notice before adding a new Sub-processor that will process customer personal information, and prompt notice when one is removed.
Subscribe to change notifications: email privacy@provalet.io with the subject line “Subscribe — Sub-processor Notices”, and we will add you to the notification list. Include the email address you want notices sent to.
Objection. If you are a service company and you reasonably object to a new Sub-processor on data protection grounds, tell us at privacy@provalet.io within thirty (30) days of the notice. We will work with you in good faith to address the concern, and if we cannot, you may terminate the affected portion of your subscription and receive a refund of prepaid, unused fees for the terminated portion of the then-current term.
Every version of this page is dated and numbered so you can identify which list was in effect on a given date. Prior versions are available on request.
| Version | Effective | Summary of changes |
|---|---|---|
| 2.0 | August 28, 2026 | Added Anthropic and OpenAI (AI), Twilio (SMS), Intuit/QuickBooks (accounting integration), PostHog (analytics), Expo, Apple, Google (push), and Calendly. Clarified that GoHighLevel is our CRM and marketing platform for prospective customers only, and does not process customer, technician, or homeowner data. Removed Synthflow, CloseBot, Plaid, LexisNexis, The Trade Desk, Salesforce CRM, and Impact. Corrected the stated purpose for Brevo, Slack, Stripe, and Heroku. Added the Customer PI column, the marketing-only category, change notification, objection rights, and version history. |
| 1.0 | February 14, 2025 | Initial published list. |
| Sub-processor | Removed | Former purpose |
|---|---|---|
| Synthflow AI | August 28, 2026 | Voice and call handling — not deployed |
| CloseBot | August 28, 2026 | AI functionality — no longer used |
| Plaid Inc. | August 28, 2026 | Bank account verification and linking |
| LexisNexis Risk Solutions | August 28, 2026 | Identity verification and fraud prevention |
| The Trade Desk, Inc. | August 28, 2026 | Digital advertising campaigns |
| Salesforce, Inc. (CRM) | August 28, 2026 | Customer relationship management and call dialer — replaced by GoHighLevel. Heroku, a Salesforce company, remains in use for application hosting. |
| Impact Tech, Inc. | August 28, 2026 | Partner and affiliate tracking |
Questions about this list: privacy@provalet.io · Pure Coastal Technologies, Inc., 365 5th Avenue South, Suite 201, Naples, FL 34102