Subprocessor List
verified third parties used to process information for Pinsot
Introduction and scope
Pinsot is a product operated by Dakoli LLC, a California limited liability company. This document explains the rules, rights, procedures, and responsibilities that apply to verified third parties used to process information for pinsot
Pinsot provides subscription software and technology for nail salon operations in a global market. Salons are independent businesses that provide nail, beauty, wellness, and related services to their clients. Unless a document expressly says otherwise for a specific transaction, the salon—not Pinsot—is responsible for its services, prices, technicians, schedules, employment relationships, commissions, taxes, refunds, client care, licensing, sanitation, and regulatory compliance.
The English version is the controlling version unless applicable law requires otherwise. The Vietnamese translation is provided for meaningful access and convenience and is intended to preserve the same substance.
How this list is maintained
This list names only providers supported by repository configuration or deployment documentation. A dependency, mock adapter, provider-neutral interface, planned integration, or development tool does not establish production processing. Provider purpose and region are stated only to the level verified; “not yet verified” is more accurate than an invented location.
Dakoli LLC evaluates the service purpose, data categories, access, contractual protection, security information, transfer needs, and deletion expectations before treating a provider as an approved production subprocessor. The customer remains responsible for integrations it independently directs or connects outside the Pinsot service.
Verified providers
Vercel Inc. — purpose: hosting and delivery of the public Pinsot web application and related web build output; data categories: website request, device, log, and information voluntarily submitted through enabled public forms; processing region: not yet verified for a production data-residency commitment; date added to this register: July 20, 2026.
Railway Corporation — purpose: configured hosting for Pinsot API services and PostgreSQL environments described in deployment documentation; data categories: account, salon, operational, request, log, and database information processed by enabled services; processing region: not yet verified for a production data-residency commitment; date added to this register: July 20, 2026.
Technologies not represented as active subprocessors
Better Auth and Expo components appear as software dependencies or platform foundations, but this list does not state that their maintainers receive production personal information merely because packages are installed. Provider-neutral payment, messaging, telephony, AI, accounting, payroll, push, and other adapters do not establish a live provider relationship. No advertising provider is verified for the public site.
If a new provider becomes verified and processes Customer Personal Data, the register should be updated with provider, purpose, data categories, known region, and date added before public claims are expanded. Removal from the list does not necessarily mean immediate deletion where lawful retention or migration periods apply.
Update notices and objections
Customers may request subprocessor update notices by emailing privacy@pinsot.com with the legal business name, Pinsot account, and contact address. This is a documented email request process; an automated notification subscription is not represented as implemented.
Where an applicable DPA provides an objection right, the customer must object within the stated period and explain a reasonable data-protection concern. The parties will discuss mitigation, an alternative, or termination of the affected feature. An objection does not require Pinsot to provide a service without infrastructure necessary to operate it.
Changes, language, and contact
This document is version 2026.07.20, effective and last updated July 20, 2026. We may update it to reflect product, legal, safety, or operational changes. Material changes will be communicated through an appropriate public or in-product notice when reasonably required. Continued use after an effective change is governed by applicable law and any notice or consent that law requires.
Questions and requests concerning this document may be sent to privacy@pinsot.com. Contact addresses are centralized and require owner verification before production. Do not email passwords, verification codes, full payment credentials, government identification, health details, or unrelated client records.