List of Sub-Processors

The following Sub-Processors are engaged by Gatherings LLC dba Gaytherings ("Gaytherings") in connection with the provision of the Services. Each Sub-Processor processes Organizer Personal Data only to the extent necessary to support Gaytherings's delivery of the features and functions of the Services, subject to appropriate data protection terms and safeguards. This list is maintained in accordance with the Gaytherings Global Data Processing Agreement ("DPA").

Sub-Processors

UpCloud Ltd

• Purpose: Cloud hosting, storage, infrastructure, backup, networking, and disaster recovery services supporting the Services. Primary hosting provider; Organizer Personal Data is stored at rest within the European Union.

• Data processed: Organizer Personal Data stored and processed within the Services, including account information, Event and Membership Event data, orders and attendance records, uploaded content, logs, and related system information.

• Location: European Union (Finland)

• Transfer mechanism: Not applicable — data remains within the EEA.

Stripe, Inc.

• Purpose: Payment processing, payouts, organizer identity and tax verification (Stripe Connect), Tap to Pay transaction processing, fraud prevention, and financial transaction services.

• Data processed: Transaction data, payout information, billing information, identity verification information, limited account information, and payment-related metadata.

• Location: United States / Global

• Transfer mechanism: Standard Contractual Clauses and/or EU-U.S. Data Privacy Framework, as applicable.

Brevo (Sendinblue SAS)

• Purpose: Transactional email delivery supporting the Services, including ticket and receipt delivery, order confirmations, one-time passcodes (OTP), notifications, and related communications. May also be used for SMS delivery if SMS features are enabled.

• Data processed: Email addresses, message content and delivery metadata, authentication and verification data, and limited Organizer Personal Data contained in messages or notifications transmitted through the Services; phone numbers if SMS features are enabled.

• Location: European Union (France)

• Transfer mechanism: Not applicable — data remains within the EEA.

Google LLC

• Purpose: Web analytics (Google Analytics, subject to user cookie consent), business productivity and email services (Google Workspace), and related support services.

• Data processed: Pseudonymous analytics identifiers, device and browser information, usage data, IP addresses; and, for Workspace, business communications and support correspondence that may contain Organizer Personal Data.

• Location: United States / Global

• Transfer mechanism: Standard Contractual Clauses and/or EU-U.S. Data Privacy Framework, as applicable.

Anthropic, PBC

• Purpose: Automated content review supporting moderation of Event listings and related content prior to and after publication, as described in our Event Guidelines.

• Data processed: Event listing content submitted for review, including titles, descriptions, and images, which may incidentally contain Organizer Personal Data. Content submitted for review is not used by the provider to train its models, in accordance with its commercial terms.

• Location: United States

• Transfer mechanism: Standard Contractual Clauses and/or EU-U.S. Data Privacy Framework, as applicable.

Chatwoot, Inc.

• Purpose: Customer support platform used to receive, manage, and respond to support requests, reports, and other inquiries from Organizers and users.

• Data processed: Names, email addresses, support conversation content and history, and limited Organizer Personal Data contained in support requests or attachments.

• Location: United States / Global

• Transfer mechanism: Standard Contractual Clauses and/or EU-U.S. Data Privacy Framework, as applicable.

Mistral AI SAS

• Purpose: AI-assisted support chat infrastructure used to help receive, triage, and respond to support inquiries through the Services.

• Data processed: Support conversation content, which may include names, email addresses, and limited Organizer Personal Data contained in support requests.

• Location: European Union (France)

• Transfer mechanism: Not applicable — data remains within the EEA.
  

Additional Notes

Gaytherings may update this list periodically to add or remove Sub-Processors used in connection with the Services, in accordance with the DPA. Organizers will be notified of material changes in accordance with the DPA and applicable Data Protection Laws.

All Sub-Processors are subject to written agreements imposing data protection, confidentiality, and security obligations consistent with those of the DPA. For cross-border transfers, Gaytherings relies on Standard Contractual Clauses or other lawful transfer mechanisms as required under applicable Data Protection Laws.

If you have questions about this list, contact us at support@gaytherings.com.