This page lists the third-party service providers (“sub-processors”) that MSW Digital LLC uses to operate Cake Day. These providers may process customer data on our behalf in connection with the Service. We share information only to the extent needed for them to perform their services, and each sub-processor is bound by contractual data protection obligations.
For full details on what data we collect, how we use it, and your rights, see our Privacy Policy.
Current sub-processors
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Slack Technologies, LLC | Workspace integration, OAuth, event delivery, message posting | Workspace ID, channel IDs, member identifiers, encrypted bot token, event metadata | United States |
| Google LLC (Gemini API) | AI-assisted shout-out text generation (model: Gemini 2.5 Flash) | Celebrant's first-name handle, celebration kind, timing framing, anniversary year count, and Pro-tier custom tone string if configured. No tokens, no emails, no roster contents are sent. | United States |
| Stripe, Inc. | Payment processing and subscription billing | Billing email, plan tier, subscription status, invoice history, payment method metadata. We never see or store full card numbers; Stripe handles all payment data under PCI-DSS compliance. | United States |
| Supabase, Inc. | Hosted Postgres database, automated backups, point-in-time recovery | Roster entries, configuration, audit logs, encrypted bot tokens, billing identifiers | United States (us-west-2 region) |
| Fly.io, Inc. | Bot application hosting (bot.cakeday.io) | Server logs, request metadata, runtime environment variables | United States |
| Vercel, Inc. | Marketing site and customer dashboard hosting (cakeday.io) | Server logs, request metadata, runtime environment variables | United States |
| Cloudflare, Inc. | DNS, CDN, edge security headers | Request metadata at edge, no application data persisted | Global edge network |
Notification of changes
We will notify workspace administrators of material changes to this sub-processor list by email or by posting a notice in the Service, and we will update the “Last updated” date at the top of this page. Continued use of the Service after a change means you accept the updated list.
Cross-border transfers
We are based in the United States, and our primary sub-processors operate in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States. Where required, we rely on mechanisms such as the EU Standard Contractual Clauses or the EU–US and UK–US Data Privacy Framework for lawful cross-border transfers.
Questions or objections
If you have questions about our sub-processors, or if you object to a specific sub-processor, please email info@cakeday.io. We will respond within a reasonable time and discuss alternative arrangements where feasible.
Questions or requests?
Email us — we'll get back to you fast.
info@cakeday.ioCake Day is a service of MSW Digital LLC.