Subprocessors

• Render runs the Little Desk application: the web service, the background worker, and the scheduler. It also holds the persistent disk for CMS uploads and the Redis cache and task queue we use to operate the Service.
• Amazon Web Services (RDS) hosts the PostgreSQL database that stores school, staff, family, booking, and billing records.
• Amazon CloudFront delivers static assets (stylesheets, scripts, and images) for the site.

• Postmark sends transactional email: booking confirmations, reminders, staff invitations, invoices, and other messages that are part of providing the Service. Postmark processes the destination address and the contents of those messages.

• Twilio sends SMS and WhatsApp reminders when a parent has opted in. Twilio processes the destination phone number and the contents of those messages.
• Meta delivers WhatsApp messages through the WhatsApp Business platform. Message contents and the destination phone number pass through Meta when a parent chooses WhatsApp.

• Stripe processes subscription billing and invoicing. Stripe holds the school's billing contact, mailing address, purchase-order number, and the customer and subscription identifiers needed to invoice them.

• Google provides sign-in and calendar sync when a staff member connects a Google account. We receive the identifiers Google returns (typically name, email, and profile photo) and OAuth tokens so we can read calendar availability and create or update conference events. We request calendar read and event scopes only. We do not request access to email contents.
• Microsoft provides sign-in and calendar sync when a staff member connects a Microsoft account, under the same limited use: availability and writing conference events the school asked us to schedule.

We do not use calendar access for any purpose other than showing availability and writing those events.

• Google reCAPTCHA helps us prevent abuse and spam on public forms. When it is used, Google receives technical data from the visitor's browser that it needs to score the request.

• New Relic monitors application performance. It records technical data such as IP address, browser and device information, and request timestamps so we can operate, secure, and debug the Service. We do not use this data to advertise.
• Google Tag Manager loads measurement tags on littledesk.com when a container is configured. Those tags may set cookies and collect technical data about how visitors use the site. We do not use them for advertising.

Little Desk is operated from the United States and is intended for U.S. schools. These subprocessors process information in the United States, and some may process it in other countries where they operate. If you access the Service from another country, see International users in the Privacy Policy.

We will update this page when we add, replace, or stop using a subprocessor. The "Effective" date at the top of the page will change when we do. For material changes we will notify school administrators by email or through the Service.

Questions about this list:

Appointlet LLC (Little Desk) Email: support@littledesk.com