Providers and Subprocessors
Last updated: October 19, 2026
These are the outside services Rook LLC uses to run Luni, what each one is for, and what information it receives. Unless noted, they process information on our behalf to provide the service. We update this page before a provider is added. Questions: support@lunisolutions.com.
Used to run Luni
| Provider | Purpose | Information it receives |
|---|---|---|
| Supabase | Database, dashboard sign-in (Supabase Auth) and backups | Business and customer records, messages, dashboard accounts and their sign-in, invitation and password emails (sent through Resend) |
| Railway | Hosting the Luni service | Information passing through the service; logs, with customer details masked |
| Twilio | Text messages and missed-call text-back, for a business with a Luni text number; the voice the missed-call greeting and the dashboard's call button use (Amazon Polly, through Twilio) | Phone numbers, text messages and photos sent by text, call records, and the words of those spoken lines |
| Anthropic | The AI that drafts replies, describes photos, reads owners' job-update texts and answers the dashboard's Help chat | Conversation text and photos, customers' first names, relevant memories (with addresses masked), appointment times and addresses, owners' job-update texts (customers' phone numbers left out), Help chat questions, and the business's own facts and website text. Never price amounts: Luni adds approved prices itself |
| Resend | Sign-in, invitation and alert emails, and the invoice, payment reminder and receipt emails a business sends its customers | Email addresses, alert contents (which can quote customer messages), and invoice details (amount, work, pay link) |
| Sentry | Error monitoring | Error reports, with customer details masked |
| GitHub | Encrypted backup copies | Encrypted database backups, kept 90 days |
| Google Maps Platform (Geocoding and Routes) | Locating every business's address and, when service-area checks or booking are on, customers' places and drive times between visits | Addresses and place names, map coordinates |
Used when a business's settings call for them
| Provider | Purpose | Information it receives |
|---|---|---|
| National Weather Service | Weather alerts for scheduled jobs, when the business has job updates and weather alerts on | The map coordinates of a job's address; no names or messages |
| Twilio, with Google speech-to-text and text-to-speech | AI phone answering, when the business turns it on: Twilio passes the caller's speech to Google to turn into text, and speaks the AI's replies in a Google voice; Luni receives only the text | The caller's voice and phone number, what is said on the call; no audio is kept by Luni |
Used only when a business connects them
These are the business's own accounts, chosen by the business. They handle information under the business's own agreements with them, not as Luni's subprocessors.
| Provider | Purpose | Information it receives |
|---|---|---|
| Google Calendar, Microsoft Outlook, Apple iCloud | Keeping the business's calendar in step | Appointment times, the customer's name or phone number and address on events, busy times |
| The business's own CRM, identified by the provider's name and webhook address recorded in its settings | Keeping the business's CRM in step, when the business turns on CRM webhooks | New leads (phone number and first message), confirmed and cancelled visits (name, phone number, address), hand-offs, won and lost estimates, finished jobs |
| The business's own pay-link provider | A pay link the business enters, put in its invoice texts | Nothing from Luni; customers open the link themselves |
Built, not in use yet
No business can turn these on yet. We will update this page before any of them is used.
| Provider | Purpose | Information it would receive |
|---|---|---|
| Stripe | Pay links on the business's own Stripe account | Invoice amount, description and Luni's invoice reference; customers pay on Stripe's own page |
| Meta (Facebook and Instagram) | Answering the business's Facebook and Instagram messages, once Meta approves Luni | Luni's replies and the person's Facebook or Instagram id |
| Intuit QuickBooks Online, Square, Jobber and Housecall Pro (the business's own accounts) | Reading the business's invoices and payments (Housecall Pro: its jobs), read-only, to follow up on open invoices | Nothing from Luni beyond sign-in (Housecall Pro: the business's own API key) and read requests; Luni reads invoices, payments and the customers on them |
| Square Appointments (the business's own account) | Keeping the business's Square bookings and Luni's in step, both ways | Appointment times, the team member and service, Luni's notes for the business, and the customer's name, phone number and email (to find the customer in Square, or add them); Luni reads bookings, team members, services and the phone numbers and emails of the customers on bookings |
| WhatsApp (through Twilio) | Answering WhatsApp messages; used today only on our own test system (Twilio's WhatsApp sandbox), for no business | Phone numbers, WhatsApp messages and photos |
The Privacy Policy explains how personal information is handled.