Sub-processors
Last updated: 28 September 2026
Guv is operated by Glebefish Limited. Running it means relying on a small number of third-party services. Where we handle personal data on behalf of a business using Guv, those services are our sub-processors, and this page lists all of them.
It is kept current. If you want to be told when it changes, email hello@guvguvguv.com.
Who does what
| Service | What it does for Guv | What data it handles | Where |
|---|---|---|---|
| Google Firebase & Google Cloud |
Sign-in, database, photo and file storage, push notifications, crash reporting, usage analytics, and running our server code | Everything the app stores: jobs, customer details, photographs, signatures, messages, and user accounts | London (europe‑west2) for the database, file storage and server code. Crash reporting and analytics may be processed outside the UK |
| Google Maps | Turning a typed job address into map coordinates, and showing the job on a map | The job address only | Per Google's terms |
| Resend | Sending invitation emails when a trade business invites someone to join it on Guv, and — only where a trade business has turned them on — job update emails to that trade business's own customers | The invited person's email address, and the name of the person inviting them. Where job updates are on: the customer's name and email address, and what the message says about their job — title, reference, address, and who signed for it. Updated 6 September 2026, before the feature could be used | European Economic Area (Ireland) |
| Expo | Building the app, and delivering app updates to phones without a full reinstall | A device's IP address and app version when it checks for an update. No customer or job data | Global content delivery network |
| Anthropic Ireland, Limited Claude API |
Two things. First, when you import your customer list from a spreadsheet, working out which column is which — which one holds the name, which the phone number. Added 1 September 2026. In use since 3 September 2026. Second, when you upload a PDF booking confirmation, reading it to pull out the customer and the addresses for you to check. Added 25 September 2026, and off for your firm until one of your admins turns it on in Settings — this list is updated before a change is made, not after | A sample of the file you upload — its column headings and up to twenty rows, with long entries shortened. Not the rest of the file. It is asked to describe the layout, not to produce any customer record — every record is built from your file by our own code. No person reads it — we checked their own supplier list on 1 September 2026 and there is nobody on it doing data labelling or human review, which is the arrangement that would put a contractor in front of your file. For the PDF reading, the whole document you upload — that is the customer's name, phone number and address as they appear on it. Nothing is created from it until you have checked what was found, and the same terms apply: no training, deleted within 30 days, no person reads it | United States, under the EU Standard Contractual Clauses and the UK Addendum. Their own computing runs on Google, Amazon and Microsoft, worldwide — unlike our own database, which is pinned to London. Those clauses are what cover it, rather than a region setting |
| Hetzner Online GmbH our map server |
Working out the real driving distance of a job — road miles rather than a straight line — so a price can be based on the drive that will actually be made. Added 17 September 2026, before the feature reaches anyone | Map coordinates only: the stops on a job, and the business's own address as the start and end of each van's day, for a business that keeps its vans in the app. No name, no address in words, no phone number, no email address. The map itself is open data held on that machine, so nothing is looked up anywhere else | Germany (Falkenstein). It never leaves the EU, and it is a machine we rent and run ourselves rather than somebody else's service |
| HERE Europe B.V. drive times in traffic |
Working out how long a job will take to drive in the usual traffic for the day and time it leaves, on the office's new job form. Only on a firm whose jobs are priced by the mile on the dashboard, which is Vanround's; a Guv job is never sent to it. Added 28 September 2026 | Map coordinates only: the stops on the job, and the day and time it leaves. No name, no address in words, no phone number, no email address. The drive time that comes back is deleted from the job after 30 days, which is as long as HERE's terms allow it to be kept. HERE may use anonymised, aggregated learnings from these requests to improve its own products, which its terms allow. We have asked HERE to switch that off for our account, and this line will say when it has | The Netherlands (HERE Europe B.V., Eindhoven). HERE's terms do not say which country a request is processed in. We have asked, and this line will say when they answer |
| Ideal Postcodes | Turning a postcode into the list of addresses at it, so an address can be picked from a list instead of typed out | The postcode, and nothing else — not the customer's name, not the house number, not who was asking or what the job is | United Kingdom |
| Cloudflare | Hosting this website and the dashboard, forwarding email sent to our contact address, and carrying requests to our map server | Website visitor data, anything you send us by email, and the map coordinates on their way to our map server | Global |
What this means in practice
Everything a business records in Guv — jobs, customer names and addresses, photographs and signatures — is stored by Google in London. It does not go to any of the other services on this page, except in five narrow ways: a job address is sent to Google Maps so it can be placed on a map; a postcode is sent to Ideal Postcodes so the addresses at it can be listed; the coordinates of a job's stops are sent to our own map server so the drive between them can be measured; a customer file or PDF booking that an admin uploads is sent to Anthropic to be read; and a trade business that has turned on job update emails sends that customer's name, email address and job details through Resend.
Of the remaining services, Resend is the only one that ever sees a customer by name, and only where a trade business has turned job update emails on. With those emails off — which is how every trade business starts, and how both of ours are today — Resend only ever handles an invitation. Expo only ever sees a phone checking whether a newer version of the app exists. Cloudflare only handles this website and our inbox.
One route does not involve Resend at all. A trade business can connect its own Microsoft 365 or Google account, and its job update emails then go out through that account rather than through us — so the message reaches the customer via the trade business’s own mail provider, under the arrangement it already has with them, and Resend never sees it. We hold the permission that account gave us so the emails can be sent, and nothing else; disconnecting it in Guv removes that permission at our end, and the account’s own settings remove it at theirs. Added 6 September 2026.
One thing on this page is not a sub-processor at all, and it is worth saying which. When a worker taps “Open in Maps”, the job address is handed to the navigation app they chose — Google Maps, Waze or Apple Maps. That app is working for the worker at that point rather than for us, so it is not somebody processing data on our instructions and it is not listed above. Nothing else about the job goes with the address. Added 17 September 2026, because the policy described the map the app draws and never the one a worker opens.
What we do not do
- We do not sell personal data, and we do not share it for anyone else's own purposes.
- We do not use it for advertising.
- We do not use your data to train AI or machine learning models, and we do not let anyone else do so. The only features that send customer data to an AI service are the two Anthropic ones listed above, each only when an admin uploads a file for it to read, and neither lets Anthropic train on it. Any new one will be listed here, and you told by email, before it is switched on.
Each of the services above uses suppliers of its own, published in its own sub-processor list and bound by our agreement with it. We can tell you what we send and to whom — that is this page — but we cannot make promises on a supplier's behalf about its own supply chain. Where a provider publishes a list, our agreement with them requires notice before it changes.
One setting worth naming
Google Analytics offers a setting that lets Google use the data it collects to improve its own products. Turning it on would make Google an independent user of that data rather than a service acting on our instructions.
We have turned it off, along with the options that contribute data to industry benchmarks and that give Google's sales and marketing staff access to our analytics. The one option we have left on lets Google's technical support staff look at the data when they need to diagnose a fault — that is them helping us run the service, which is the whole point of them having it.
We mention it because it is on by default, and because it is the setting that decides whether the first line above is actually true.
Changes
Where we choose to add or replace a sub-processor, we update this page and tell affected businesses by email before the change takes effect — so it is never something you find out about afterwards. The Anthropic entry above is the first one done this way.
Where one of the services above changes its own suppliers, we pass their notice on as soon as we get it. We cannot give more notice than we are given, and the periods differ: Google gives us 30 days, Resend 14, and Anthropic commits only to “reasonable notice”. Where what we receive is too short to be useful, we will switch the affected feature off rather than pass on notice you cannot act on.
Questions
If you are a business using Guv and you need this in contractual form, or you want to know more about how one of these services is used, contact hello@guvguvguv.com.
If you are a customer of a business that uses Guv, that business controls your data — contact them directly. See section 2 of our privacy policy.