MaitreSubprocessors
In short
These are the 10 companies that process information for Maitre, what each one does and where. We email restaurant account owners at least 15 days before we add or replace one that handles guest information. This list is also our answer to anyone who asks which specific third parties received their information.
1. Current subprocessors
| Company | What it does for us | Information | Where | Its policy |
|---|---|---|---|---|
| Supabase (Supabase, Inc.) | Database, sign-in and file storage | Everything the service stores | United States | Supabase privacy policy |
| Cloudflare (Cloudflare, Inc.) | Hosting, delivery, security checks (including Turnstile on sign-in), approximate city and time zone | Requests, network addresses, approximate location | United States and its global network | Cloudflare privacy policy |
| OpenAI (OpenAI, L.L.C.) | AI answers, retrieval search, live voice and transcription, one bounded web search for venue facts | Guest messages and voice, restaurant content | United States | OpenAI privacy policy |
| Stripe (Stripe, Inc.) | Subscription billing for restaurants | Owner billing details | United States | Stripe privacy policy |
| Square (Block, Inc.) | Catalog sync, pickup orders and hosted checkout | Menu, orders, pickup name | United States | Square privacy policy |
| Google (Google LLC) | Sign in with Google; address lookup during restaurant setup | Owner sign-in, restaurant address | United States | Google privacy policy |
| Resend | Account, security, billing and support emails; guests' order emails | Owner email address and message; a guest's email address, name and order (items, estimated pickup time) for order emails | United States | Resend privacy policy |
| WeatherAPI.com | Current weather for a guest's approximate city | A city or region, never identity | United States | WeatherAPI.com privacy policy |
| Brave Search (Brave Software, Inc.) | Finding a restaurant's own public pages during menu import | The restaurant's website address and search words | United States | Brave Search privacy policy |
| Firecrawl | Reading a restaurant's own public pages during menu import | Public web pages | United States | Firecrawl privacy policy |
2. AI providers and their usage policies
Our AI provider is OpenAI. OpenAI may keep API data for up to 30 days to monitor abuse, then deletes it; it does not use API data to train its models. Its usage policies apply to the use of the service and are linked in the table above.
3. Changes and how to hear about them
Restaurant account owners are emailed automatically at least 15 days before a change and may object under the Data Processing Addendum. Anyone else can ask to be told about changes by emailing team@hiremaitre.com.
History: this list was first published on October 16, 2026, with the providers above already in use.