Legal
Sub-processors
The third parties that process personal information for Yardstick, what for, and their status.
Version 1.0, effective .
Last checked against the Service's code and configuration: October 14, 2026.
About this list
These are the third parties that process personal information for Yardstick Rental Software LLC ("Yardstick") to provide the Service. Before adding or replacing one that processes Customer Personal Data in a material way, we'll update this page and tell business customers as the Data Processing Addendum describes. Status: In use means it processes data in production today; When enabled means it's used only once a feature is switched on for the Service or by a business.
Each provider processes information in the United States and in other countries where it operates, under its own privacy policy and data-processing terms (linked below). Yardstick is based in the United States.
Sub-processors
| Provider | Purpose | Personal data involved | Status | Privacy policy / DPA |
|---|---|---|---|---|
| Render Services, Inc. | Hosts the Yardstick app and its PostgreSQL database, including stored photos, and keeps the backups and server logs for them | All Service data | In use | Privacy · DPA |
| Cloudflare, Inc. | Hosts this marketing site (getyardstick.co) on Cloudflare Pages, provides DNS, and proxies web traffic to the Yardstick app (app.getyardstick.co) through its network | IP address, browser and request information of visitors to the site and the app; the content of app requests passes through Cloudflare's network in transit (encrypted between the visitor and Cloudflare, and between Cloudflare and the app) | In use | Privacy · DPA |
| Stripe, Inc. (Billing) | Billing for Yardstick subscriptions | Business billing contact and payment details (card details are held by Stripe; Yardstick stores customer and subscription IDs, plan and status) | In use | Privacy · DPA |
| Stripe, Inc. (Stripe Identity) | Renter identity verification | The renter's ID images, selfie and the biometric match, held and processed by Stripe; Yardstick receives the status and verified name | When enabled (Stripe Identity configured for the Service, and the business turns verification on) | Privacy · DPA |
| Anthropic, PBC | AI Damage Check; AI Help; photo suggestions for new equipment | Pickup and return condition photos and equipment names; Help questions, up to 8 earlier messages, app page, user role and minimal account facts (no renter names, contact details, booking details or amounts); equipment names and categories | In use (each business can turn automatic damage checks off) | Commercial Terms · DPA · Privacy |
| Resend (Plus Five Five, Inc.) | Sending email, from [email protected] | Recipient names and email addresses; email content (rental details and secure links); the business's contact email as the reply-to on renter emails | In use | Privacy · DPA |
| Google LLC (Google Fonts) | Web fonts on the business app and renter pages | IP address and browser information of anyone who loads those pages | In use | Privacy |
| Google LLC (Google Maps Platform: Places and Address Validation) | Suggesting and checking business location addresses typed by business users; requests go from Yardstick's server, not the user's browser | The address text being typed or checked (business locations, not renter data) | When enabled (not in use today) | Privacy |
Services a business or user chooses to connect
These receive data only when a business or user connects them, and act under their own terms and privacy policies.
| Provider | Purpose | Data sent or received | Trigger | Status | Privacy policy |
|---|---|---|---|---|---|
| Google LLC (Sign in with Google) | Optional sign-in for business users | Google account ID, email and name are received from Google | A user chooses Google sign-in | When enabled (not offered today) | Privacy |
| Intuit Inc. (QuickBooks Online) | Accounting sync | Renter's name (as the customer), invoice line descriptions and amounts | A business connects QuickBooks and syncs an invoice | When a business connects it | Privacy |
| Xero Limited | Accounting sync | Renter's name (as the contact), invoice line descriptions and amounts | A business connects Xero and syncs an invoice | When a business connects it | Privacy |
Loaded on renter pages, not processing payments
| Provider | What happens | Note |
|---|---|---|
| Stripe, Inc. (Stripe.js) | Stripe's script loads on the booking page and the Manage Rental page and may set Stripe cookies and collect device information for fraud prevention | Renter card payments aren't offered today. Stripe Connect (renter payments to the business's own Stripe account) will be added to the table above, with notice, before renter payments are ever turned on. |
Not used
Yardstick doesn't currently use any analytics, advertising-pixel, session-recording, SMS, error-tracking or support-chat provider. If that changes, this list and the Privacy Policy will be updated first.
Questions
Questions about this list, or to object to a new sub-processor: [email protected].