Sub-processors
Last updated: 1 September 2026
Guv is operated by Glebefish Limited. Running it means relying on a small number of third-party services. Where we handle personal data on behalf of a business using Guv, those services are our sub-processors, and this page lists all of them.
It is kept current. If you want to be told when it changes, email hello@guvguvguv.com.
Who does what
| Service | What it does for Guv | What data it handles | Where |
|---|---|---|---|
| Google Firebase & Google Cloud |
Sign-in, database, photo and file storage, push notifications, crash reporting, usage analytics, and running our server code | Everything the app stores: jobs, customer details, photographs, signatures, messages, and user accounts | London (europe‑west2) for the database, file storage and server code. Crash reporting and analytics may be processed outside the UK |
| Google Maps | Turning a typed job address into map coordinates, and showing the job on a map | The job address only | Per Google's terms |
| Resend | Sending invitation emails when a business invites someone to join it on Guv | The invited person's email address, and the name of the person inviting them. No customer or job data | European Economic Area (Ireland) |
| Expo | Building the app, and delivering app updates to phones without a full reinstall | A device's IP address and app version when it checks for an update. No customer or job data | Global content delivery network |
| Anthropic Ireland, Limited Claude API |
When you import your customer list from a spreadsheet, working out which column is which — which one holds the name, which the phone number. Added 1 September 2026. In use since 3 September 2026 — this list is updated before a change is made, not after | A sample of the file you upload — its column headings and up to twenty rows, with long entries shortened. Not the rest of the file. It is asked to describe the layout, not to produce any customer record — every record is built from your file by our own code. No person reads it — we checked their own supplier list on 1 September 2026 and there is nobody on it doing data labelling or human review, which is the arrangement that would put a contractor in front of your file | United States, under the EU Standard Contractual Clauses and the UK Addendum. Their own computing runs on Google, Amazon and Microsoft, worldwide — unlike our own database, which is pinned to London. Those clauses are what cover it, rather than a region setting |
| Cloudflare | Hosting this website, and forwarding email sent to our contact address | Website visitor data, and anything you send us by email | Global |
What this means in practice
Everything a business records in Guv — jobs, customer names and addresses, photographs and signatures — is stored by Google in London. It does not go to any of the other services on this page, with one exception: a job address is sent to Google Maps so it can be placed on a map.
The remaining services never see customer data. Resend only ever handles an invitation email. Expo only ever sees a phone checking whether a newer version of the app exists. Cloudflare only handles this website and our inbox.
What we do not do
- We do not sell personal data, and we do not share it for anyone else's own purposes.
- We do not use it for advertising.
- We do not use your data to train AI or machine learning models, and we do not let anyone else do so. No feature in Guv sends customer data to an AI service today. One is built and switched off — the customer import listed above. It is named on this page now, before it is switched on rather than after, which is the point of listing it. You will be told by email before that changes.
Each of the services above uses suppliers of its own, published in its own sub-processor list and bound by our agreement with it. We can tell you what we send and to whom — that is this page — but we cannot make promises on a supplier's behalf about its own supply chain. Where a provider publishes a list, our agreement with them requires notice before it changes.
One setting worth naming
Google Analytics offers a setting that lets Google use the data it collects to improve its own products. Turning it on would make Google an independent user of that data rather than a service acting on our instructions.
We have turned it off, along with the options that contribute data to industry benchmarks and that give Google's sales and marketing staff access to our analytics. The one option we have left on lets Google's technical support staff look at the data when they need to diagnose a fault — that is them helping us run the service, which is the whole point of them having it.
We mention it because it is on by default, and because it is the setting that decides whether the first line above is actually true.
Changes
Where we choose to add or replace a sub-processor, we update this page and tell affected businesses by email before the change takes effect — so it is never something you find out about afterwards. The Anthropic entry above is the first one done this way.
Where one of the services above changes its own suppliers, we pass their notice on as soon as we get it. We cannot give more notice than we are given, and the periods differ: Google gives us 30 days, Resend 14, and Anthropic commits only to “reasonable notice”. Where what we receive is too short to be useful, we will switch the affected feature off rather than pass on notice you cannot act on.
Questions
If you are a business using Guv and you need this in contractual form, or you want to know more about how one of these services is used, contact hello@guvguvguv.com.
If you are a customer of a business that uses Guv, that business controls your data — contact them directly. See section 2 of our privacy policy.