Subprocessors
The companies Bless uses to run the service that may handle an organization's donor, registrant and guest data, and what each one receives.
Last updated: February 13, 2027
company legal name ("Bless") uses the companies below to run the Bless service. When they handle the personal data an organization collects through Bless (its donors, registrants, attendees, bidders, volunteers and staff), they act as Bless's subprocessors under our Data Processing Addendum. Each one is bound by a written contract with data protection terms, and Bless stays responsible for their work.
For how Bless handles personal data overall, see our Privacy Policy and Cookie Notice.
Subprocessors
| Subprocessor | What it does for Bless | Personal data involved | Location |
|---|---|---|---|
| Stripe, Inc. | Processes card payments, refunds, recurring gifts and auction charges on each organization's own Stripe connected account; also processes organizations' Bless subscription payments | Names, email addresses, billing details and card details entered by buyers and donors; amounts and what was bought or given. Card numbers go straight to Stripe; Bless never receives them | United States and other countries where Stripe operates |
| Resend | Sends every email from the service: receipts, confirmations, reminders, auction notices, recurring gift links, sign-in emails and organizations' announcements | Recipient names and email addresses, and the content of each email (for example what was bought or given, event details and amounts) | United States |
| PostHog, Inc. (US cloud) | Product analytics and error monitoring for the Bless service | Pages viewed and actions taken in the app, device and browser details, IP address, and the email address of signed-in users. Error reports can include the page address and details of the request that failed | United States |
| Hetzner Online GmbH | Hosting: runs the Bless application, its database, its cache and job queue, and stores uploaded files (such as event images) | All data held in the Bless service, including contacts, households, registrations, orders, donations, bids and custom question answers | United States (Hetzner's US region) |
A note on Stripe
Stripe has two roles. Each organization that takes payments signs up for its own Stripe account and agrees to Stripe's terms directly, so for those payments the organization is the merchant of record and Stripe also acts under its own agreement with the organization. Bless arranges the payment through Stripe Connect, which is why Stripe is listed here. Stripe's own privacy practices are described in the Stripe Privacy Policy.
Services an organization chooses to connect
These services are not Bless subprocessors. They receive data only when an organization connects its own account, and they act on the organization's instructions under the organization's own agreement with them. The organization can disconnect them at any time.
| Service | When it receives data | Data sent |
|---|---|---|
| Salesforce | Only when an organization connects its own Salesforce account to Bless | Contacts: first and last name, email address, mobile phone, date of birth, gender, household relationship and Bless record id. Households: billing street, city, state and postal code (set once when the household is first created in Salesforce). Events, event sessions and ticket types: names, dates, times, location, capacity and prices. Registrations: attendee name, event, ticket, status and source. Check-ins: who checked in, to which event or session, and when. Donations and orders: amount, date, fund, campaign, frequency, fee, payment type, source and the donor's contact and household. Campaigns and donation batches: names, dates and totals |
Services that receive a visitor's IP address when a page loads
Some pages load files from these services. Your browser asks them for the file directly, so they see your IP address and browser details, the same as any website you visit. Bless sends them no other personal data.
| Service | What it provides | Pages |
|---|---|---|
| rsms.me | The Inter typeface used across the app | Most pages, including public event and giving pages |
| jsDelivr | A code library that reads QR codes with the camera | Event check-in and auction door screens used by an organization's staff and volunteers |
Changes to this list
Before a new subprocessor starts handling an organization's personal data, Bless updates this page and emails each organization's owner, as Section 9 of the Data Processing Addendum describes. An organization may object to a new subprocessor under that section.
Anyone else who wants to be told when this list changes can email legal email and ask to be added to the notice list.
Portions adapted from templates published by General Legal, PC under CC0. General Legal has not reviewed this document.