Infrastructure and product subprocessors
The services actually used depend on the Customer’s configuration. JunkHQ evaluates vendors and contractually restricts their use of Customer Personal Data where required.
| Provider/service | Purpose and data |
|---|---|
| Cloudflare | Website delivery, security, bot prevention, object storage, and edge hosting; request metadata and uploaded files. |
| Neon | Managed PostgreSQL hosting; application records stored in the JunkHQ database. |
| Resend | Transactional email delivery; recipient, sender, message content, and delivery metadata. |
| Twilio | Business calling and SMS when enabled; phone numbers, message content, consent, and delivery metadata. |
| Stripe | Platform subscriptions and connected-account customer payments; identity, transaction, and payment information. |
| Intuit (QuickBooks Online) | Optional accounting sync when a business connects its QuickBooks account; customer names and contact details, invoices, payments, refunds, and timecard/payroll-estimate records that business chooses to export. |
| DeepSeek | AI-assisted quote analysis, the in-dashboard help assistant, and the two-way SMS texting agent, each when enabled; job descriptions, customer-provided job photographs, inbound and outbound message text, and help-assistant conversation content. This is limited to contact and job-description information -- it does not include government ID or Social Security numbers, financial account numbers, precise geolocation tied to a device identifier, biometric or health data, or other categories the U.S. Department of Justice’s bulk sensitive personal data rule restricts; JunkHQ does not send those categories to DeepSeek. Direct identifiers are not intentionally included in quote-analysis prompts. DeepSeek processes this data outside the United States. |
| Geocodio | Converting service and facility addresses into geographic coordinates; address strings and request metadata. |
| SimpleRouting.io | Hosted VROOM/OSRM distance calculation and route optimization for production traffic; jobsite/facility coordinates, durations, and pseudonymous job identifiers. |
| Google and Microsoft | Optional account authentication; account email, provider identifier, and authentication metadata. |
Updates
We update this page before adding a materially new subprocessor when reasonably practicable. Customers may send questions or a reasonable objection to owen@tuzisoft.com.