EvangelIT is operated by Gooverio Labs LLC (“we”, “us”). To deliver the service, we share certain personal data with the third-party processors listed below. Each subprocessor is bound by a Data Processing Agreement (DPA) requiring them to handle data only on our instructions and in accordance with applicable law (GDPR, UK GDPR, LGPD, and equivalents).
Customers (church administrators) acting as data controllers under GDPR can review and accept this list as part of our Data Processing Agreement. We will notify customers at least 30 days before adding a new subprocessor.
| Service | Purpose & Data | Location |
|---|---|---|
| Vercel, Inc. ↗ | Application hosting and content delivery All application data in transit; session cookies; access logs | United States (with EU edge regions) |
| Railway Corporation ↗ | PostgreSQL database hosting User accounts, contacts, conversations, messages, all relational data | United States |
| Twilio Inc. ↗ | SMS and WhatsApp message delivery Phone numbers, message content, delivery status | United States (global delivery network) |
| Twilio SendGrid ↗ | Transactional email delivery (verification, outreach, notifications) Email addresses, message content, open/click events | United States |
| Anthropic PBC ↗ | AI conversation generation (Claude API) Message content sent to AI for response generation; contact context | United States |
| Stripe, Inc. ↗ | Subscription billing and payment processing Customer name, email, billing address, payment method (tokenised — we never see card numbers) | United States (global processing network) |
| Meta Platforms, Inc. (WhatsApp Business) ↗ | WhatsApp message delivery via Twilio integration Phone numbers, message content (delivered through Twilio) | United States (global infrastructure) |
Most of our subprocessors are based in the United States. For EU/UK/EEA customers, we rely on the European Commission's Standard Contractual Clauses (SCCs) and equivalent UK International Data Transfer Agreement (IDTA) as the lawful mechanism for cross-border transfer. Each subprocessor listed above maintains SCC-compliant DPAs available at the linked URLs.
Material changes to our subprocessor list will be posted on this page. Church admin customers receive 30 days' advance notice via email before a new subprocessor is engaged. To subscribe to subprocessor change notifications, email outreach@evangelit.app with the subject line “Subscribe: subprocessor updates”.
For questions about how subprocessors handle your data, contact us at outreach@evangelit.app.