Subprocessors Policy
Effective Date: November 14, 2025
Last Updated: November 14, 2025
This Subprocessors Policy (“Policy”) describes the third-party service providers (“Subprocessors”) used by GliVal (“GliVal”, “we”, “our”), a Booking Platform operated by X STAR CODE, Edmonton, Alberta, Canada.
Registration Number: TN26511691
Contact: support@glival.com
Subprocessors are engaged to support essential Platform functions including payments, communication, hosting, security, and analytics.
By using GliVal, Customers and Clients agree to the use of these Subprocessors.
1. What Are Subprocessors?
A Subprocessor is a third-party service provider that processes personal information on behalf of GliVal in order to operate the Platform.
Subprocessors are used only when necessary to:
- process payments,
- deliver SMS or email notifications,
- host infrastructure,
- perform security verification,
- store operational metadata,
- ensure performance and reliability.
GliVal does not sell personal information to any third party.
2. Current List of Authorized Subprocessors
GliVal uses the following Subprocessors as part of platform operations:
2.1 Stripe
Purpose: Payment processing, payouts, dispute handling, international fee calculation.
Data Processed: Payment Intent IDs, charge metadata, payout identifiers, transaction amounts, dispute data.
Location: Global
Notes: Required for all online payments using Stripe Connect Express.
2.2 Twilio
Purpose: SMS delivery (verification codes, confirmations, reminders, notifications).
Data Processed: Client phone number, message content, delivery timestamps.
Location: United States / Global
Notes: Required for phone-based communication and verification.
2.3 Brevo
Purpose: Email delivery (booking confirmations, reminders, notifications).
Data Processed: Client email, Customer email, message content, delivery logs.
Location: Europe / Global
Notes: Used for essential transactional emails.
2.4 Hostinger
Purpose: Hosting infrastructure for Platform components.
Data Processed: Operational data, logs, platform content, SSR output.
Location: Global
Notes: Current infrastructure provider for specific web components.
2.5 DigitalOcean
Purpose: Compute instances, storage, backups, infrastructure hosting for application services.
Data Processed: Platform metadata, operational logs, subdomain rendering data, backups.
Location: United States / Canada / Global
Notes: Used for scalable infrastructure and future deployments.
3. How Subprocessors Are Selected
GliVal selects Subprocessors based on:
- security standards,
- reliability and infrastructure quality,
- compliance with global data protection requirements,
- ability to meet operational needs,
- minimal necessary access to data.
GliVal ensures all Subprocessors use commercially reasonable security practices.
4. Data Handling & Limitations
Subprocessors:
- receive only the minimum amount of data required,
- may not use data for advertising or unrelated purposes,
- must comply with applicable data protection laws,
- must maintain appropriate security standards.
GliVal does not share:
- payment card numbers (handled exclusively by Stripe),
- sensitive identity documents,
- unnecessary personal identifiers.
5. Customer Responsibilities
Customers must:
- comply with their own legal obligations regarding Client data,
- not misuse data obtained through GliVal,
- ensure services they provide adhere to local laws.
GliVal is not responsible for misuse of data by Customers.
6. Updates to Subprocessors
GliVal may add or remove Subprocessors as the Platform evolves.
When a new Subprocessor is added:
- the Policy will be updated,
- Customers may review changes at any time,
- continued use of the Platform constitutes acceptance.
Significant additions may trigger advance notice to Customers.
7. Contact Information
For questions regarding Subprocessors or personal data:
GliVal (operated by X STAR CODE)
Edmonton, Alberta, Canada
Registration Number: TN26511691
Email: support@glival.com