Last updated October 21, 2026
Subprocessors
These are the companies that help us run WaClock and may process personal information while doing so. WaClock gives each one only the information its service needs, and each one's own terms, linked below, also apply.
Where WaClock data lives
The WaClock service and its database run on a Hostinger server in Vilnius, Lithuania, in the European Union. This is temporary until WaClock has a dedicated server in the United States. The website is hosted by Vercel in the United States. The AI model behind the website chat runs on a server in Israel that WaClock runs itself, so no outside AI company receives chat messages. WaClock is operated from Israel. We do not sell or share personal information, and we use no advertising cookies, tracking pixels or third-party analytics.
Current subprocessors
Hostinger
- Company: Hostinger International Ltd.
- What it does for WaClock: Servers that run the WaClock service and its database, and the operator's self-hosted task board, which holds a card for each ad lead.
- Personal information involved: All service data: account users' names, emails and password hashes; workers' names, mobile numbers, language and optional pay rates; clock-in and clock-out times, corrections and messages; alert settings; support chats handed to a person; ad leads (what a person enters in a WaClock lead form). Website chat messages also pass through it, without being stored, on their way to the AI model WaClock runs.
- Where: Vilnius, Lithuania (EU)
- Hostinger: privacy and data terms
Vercel
- Company: Vercel Inc.
- What it does for WaClock: Hosts the waclock.com website and web app, and passes web app requests on to the WaClock server.
- Personal information involved: Web requests and responses, including the sign-in cookie, IP address and the data shown in the web app while it is in transit. Website chat messages pass through it on their way to the AI model WaClock runs.
- Where: United States, served through Vercel's global network
- Vercel: privacy and data terms
Meta (WhatsApp)
- Company: Meta Platforms Ireland Limited
- What it does for WaClock: Runs the WhatsApp Business Platform: receives workers' clock-in messages and button taps, and delivers WaClock's replies, missed clock-out reminders, and the alerts and daily summaries employers turn on.
- Personal information involved: Workers' and alert recipients' WhatsApp numbers, message content (for alerts and summaries, workers' names, punch times and daily totals), time and delivery status.
- Where: Meta's data centers; Meta does not name the countries
- Meta (WhatsApp): privacy and data terms
Meta (lead ads)
- Company: Meta Platforms Ireland Limited
- What it does for WaClock: Runs the lead forms in WaClock's ads on Meta's apps and passes what a person enters in a form to WaClock, so WaClock can reply. Separate from the WhatsApp Business Platform above. Used only while WaClock runs lead ads.
- Personal information involved: What a person enters in a WaClock lead form: name, email address, phone number, company size and industry. WaClock sends Meta no account, worker or website visitor data for ads, and uses no Meta pixel.
- Where: Meta's data centers; Meta does not name the countries
- Meta (lead ads): privacy and data terms
Twilio
- Company: Twilio Inc.
- What it does for WaClock: Provides WaClock's US business phone number, which is registered on WhatsApp. Clock-in messages and replies travel on WhatsApp through Meta, not through Twilio, and WaClock runs no text message (SMS) program on the number.
- Personal information involved: No clock-in messages or replies. If someone sends a regular text message (SMS) to the number anyway, Twilio receives the sender's number and that message.
- Where: United States
- Twilio: privacy and data terms
Resend
- Company: Plus Five Five, Inc. (Resend)
- What it does for WaClock: Sends WaClock's emails: sign-in and account emails, trial and billing notices, manager alerts and daily summaries, and website chats a visitor asks us to follow up by email.
- Personal information involved: Recipients' names and email addresses and the email content, which for manager alerts and summaries includes workers' names, clock-in or clock-out times and daily totals.
- Where: United States
- Resend: privacy and data terms
ImprovMX
- Company: ImprovMX Incorporated
- What it does for WaClock: Forwards email sent to @waclock.com addresses, such as support@waclock.com, to the mailbox the operator answers from.
- Personal information involved: Whatever the sender writes, including website chats emailed to support, the sender's address and email metadata. ImprovMX says it does not log email content.
- Where: France and the United States
- ImprovMX: privacy and data terms
Email inbox provider
- What it does for WaClock: Receives forwarded support mail: hosts the mailbox that mail to @waclock.com addresses is forwarded to, which the operator answers from.
- Personal information involved: Whatever the sender writes, including website chats emailed to support, the sender's address and email metadata.
- Where: United States and other countries where the provider operates
Telegram
- Company: Telegram Messenger Inc.
- What it does for WaClock: Delivers website chats a visitor asks to hand to a person to the operator, carries the operator's internal service alerts, and tells the operator about each new ad lead.
- Personal information involved: Support chats: the conversation and any contact details the visitor writes in it. Service alerts: a customer's company name and account ID, billing event types and failure counts. Ad leads: what the person entered in the lead form (name, email address, phone number, company size and industry) and the name of the ad. No worker data.
- Where: Telegram's servers; Telegram does not name the countries
- Telegram: privacy and data terms
Stripe
- Company: Stripe, Inc. or the Stripe company for the account's country
- What it does for WaClock: Subscription billing and payments. Used once paid billing is switched on.
- Personal information involved: The account owner's billing contact, the number of active employees billed and subscription status. Card details are collected by Stripe directly and never reach WaClock.
- Where: United States and other countries where Stripe operates
- Stripe: privacy and data terms
- Company: Google LLC
- What it does for WaClock: Lets owners and managers sign in with their Google account instead of a password. Used only when an owner or manager chooses Sign in with Google.
- Personal information involved: Nothing from WaClock. When someone chooses Sign in with Google, they sign in at Google, and Google sends WaClock their name and email address.
- Where: United States and other countries where Google operates
- Google: privacy and data terms
Sentry
- Company: Functional Software, Inc. (Sentry)
- What it does for WaClock: Error monitoring for the WaClock server. Used only while error monitoring is switched on.
- Personal information involved: Technical error data. Reports are configured to leave out IP addresses, cookies, user identifiers and the values of variables, but a report can still contain a fragment of personal information, such as part of a failed request.
- Where: United States
- Sentry: privacy and data terms
Changes to this list
We update this page before a new company starts processing personal information for WaClock and email the owner of every active account about the change. If you have a reasonable data-protection objection, write to support@waclock.com and we will work with you on it. To get notices without an account, email us with the subject "Subprocessor updates".
See the Privacy Policy for how WaClock uses personal information. A Data Processing Addendum is available to customers on request.