1. Purpose of This List
This page is the authoritative, versioned list of the sub-processors that Hoodbnb B.V., trading as 'Tribii' ('Tribii', 'we', 'our', 'us'), engages to help deliver its platform. It is referenced from Section 7.B of our Privacy Policy and from our Data Processing Agreement, and it satisfies the disclosure and notification commitments made in both documents.
Each sub-processor is engaged under a written data-processing agreement. Where a transfer leaves the European Economic Area, it is covered by the European Commission Standard Contractual Clauses (Commission Decision (EU) 2021/914), with the UK International Data Transfer Addendum and the Swiss-recognised adjustments applied where relevant, and by the EU-US Data Privacy Framework where the recipient is independently certified.
2. Change Notification
We give hoteliers at least fifteen (15) days' notice before adding, replacing, or materially changing a sub-processor, so that a hotel has the opportunity to object on reasonable data-protection grounds. That notice is given in the application, at the hotelier's next sign-in, and not by email; the period runs from the day the notice is first shown. The objection and resolution procedure is set out in Section 4.4 of our Data Processing Agreement. The version and date of this list are recorded at the foot of this page.
This table is reproduced, row for row, in Section 7.B of our Privacy Policy and in Annex A of our Data Processing Agreement.
Google tags a hotel connects itself are not listed here. A hotel on a paid plan may connect its own Google Analytics, Google Ads or Search Console to its website and booking page. Google then processes that data under the hotel's own agreement with Google, as the hotel's provider and not as Tribii's sub-processor; Tribii only loads the tags, after the visitor consents, on the hotel's instruction. See Section 6 of our Data Processing Agreement and Section 10 of our Cookie Policy.
3. Current Sub-processors
| Sub-processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Stripe Payments Europe Ltd | Payment infrastructure for guest payments and for Tribii's own subscription billing | Ireland (EU); global infrastructure | Intra-EEA; EU SCCs 2021 for onward transfers |
| Anthropic, PBC | AI service provider: content, revenue and workflow features, migration-import structuring, fallback for the onboarding setup assistant, and AI Connections context | USA | EU SCCs 2021 (Module 3); DPF where certified |
| OpenAI, L.L.C. | AI service provider; AI Visibility probing | USA | EU SCCs 2021 (Module 3); DPF where certified |
| Google LLC | Cloud services; Gemini AI service provider, including the Hotel AI Assistant, the Reception help assistant, the onboarding setup assistant, statement reconciliation, website translation and the SEO audit; PageSpeed Insights analysis of a hotel's website for the SEO audit; AI Visibility probing; mapping and geocoding; Guest App "Continue with Google" sign-in; and Firebase Cloud Messaging (FCM) push transport | USA | EU SCCs 2021 (Module 3); DPF where certified |
| Perplexity AI, Inc. | AI Visibility probing | USA | EU SCCs 2021 (Module 3) |
| Apple Inc. | App distribution (App Store) and push-notification transport (APNs) for the Guest App | USA | EU SCCs 2021 (Module 3); DPF where certified |
| Expo (650 Industries, Inc.) | Guest App push-notification delivery, over-the-air updates, and build service | USA | EU SCCs 2021 (Module 3) |
| Resend, Inc. | Email delivery, including transactional mail, marketing mail sent on the hotel's behalf, and Guest App magic-link sign-in emails | USA | EU SCCs 2021 (Module 3) |
| Umami Software, Inc. | Cookieless page-view statistics on the hosted booking pages Tribii operates for the hotel. Does not run on the embedded widget or on hotel websites. | USA | EU SCCs 2021 (Module 3) |
| Channex.io LTD | Channel manager connectivity: property and rate content, availability and restrictions, inbound reservations from booking sites, and, where the hotel enables it, guest messaging and the display of reviews held by booking sites | United Kingdom; platform and databases hosted in EU regions | UK adequacy decision |
| Functional Software, Inc. (Sentry) | Error monitoring, configured without personal data | EU / USA | EU SCCs 2021 (Module 3) |
| Laravel Cloud, Inc. | Application hosting and platform operations, including custom-domain provisioning | USA; hosted infrastructure in the EU | EU SCCs 2021 (Module 3) |
| Amazon Web Services EMEA SARL | Underlying cloud infrastructure and object storage (EU region) | EU Central (Frankfurt) | Intra-EEA |
4. Website Analytics and Advertising: tribii.com Visitors Only
The services below process data about visitors to our public marketing website, tribii.com, where Hoodbnb B.V. acts as controller in its own right. They have no access to Property Owner data, Guest data, or any data processed through the Tribii platform or booking widget. They are listed here for transparency and are not sub-processors under the Data Processing Agreement, so the change-notification and objection rights in Section 2 do not apply to them.
They run only where a visitor has consented to the relevant category. See our Cookie Policy. The cookieless website-statistics tool is the exception to that sentence as well as to the one above it: it needs no consent, because it stores nothing on a visitor's device.
One service in this section has a second role. The website-statistics tool also runs on the booking pages we host on a hotel's behalf. The visitors there are the hotel's prospective guests rather than ours, so on that page alone it processes a hotel's data as our sub-processor, and it is listed as one in Section 3 with the change-notification and objection rights that go with it. It has no such role on this website, on the booking widget a hotel embeds in its own site, or on the websites we publish for hotels.
| Service | Provider | Role | Location | Safeguard |
|---|---|---|---|---|
| Google Analytics 4 | Google Ireland Limited | Processor | Ireland (EU); onward transfer to US | Google Ads Data Processing Terms; EU SCCs 2021; Data Privacy Framework |
| Google Ads: conversion measurement | Google Ireland Limited / Google LLC | Independent controller | Ireland (EU) / USA | Google Ads Controller-Controller Data Protection Terms; EU SCCs 2021; Data Privacy Framework |
| Meta Pixel: advertising measurement | Meta Platforms Ireland Limited | Joint controller for collection and transmission; independent controller thereafter | Ireland (EU); onward transfer to US | Meta Controller Addendum; EU SCCs 2021; Data Privacy Framework |
| Website assistant (tribii.com) | Google LLC (Gemini API) | Processor | USA | EU SCCs 2021; Data Privacy Framework where certified; paid tier, so prompts are not used to train or improve Google models |
| Umami (website statistics) | Umami Software, Inc. (Umami Cloud) | Processor | USA | Cookieless; aggregate page-view counts only; nothing stored on your device; no cross-site identifiers |
We do not use a tag-management container: the Google tag is loaded directly by our own code, so no third party can introduce further tags without a code change on our side.
Google appears in both lists, under two separate engagements. The platform entry in Section 3 (cloud services, Gemini for the Tribii application's AI features, PageSpeed Insights for the SEO audit, and mapping) covers the Tribii application. The entry above covers one marketing-website service only: the assistant on tribii.com, described in Section 5.
5. Notes on Specific Processing
Website assistant. The assistant on tribii.com answers questions from our own published pages. The question typed by the visitor, and the recent messages in the same conversation, are sent to Google (Gemini) to produce the answer. Nothing else is sent: the assistant has no access to any account, any booking or any customer record, and the material it answers from is the same content this website already serves to everyone.
The question and the answer are retained for 90 days so we can see which questions our published pages fail to answer, and are then deleted. Email addresses and telephone numbers are removed before the text is stored. No IP address is stored with them. The assistant is available without accepting cookies and stores nothing on your device: a conversation exists only in the browser tab you are reading it in, and is gone when you close it.
AI Visibility. Where a hotel enables the AI Visibility Booster, Tribii transmits the hotel's public name and city to the US-based large-language-model providers listed above to probe how those models describe the hotel. This data is not guest personal data. Tribii relies on the Standard Contractual Clauses 2021 (Module 2, controller-to-processor) and, where the recipient is certified, the EU-US Data Privacy Framework.
AI Connections (MCP). The Model Context Protocol endpoint exposes a hotel's published inventory, rate and policy data to third-party AI agents on a public, read-only basis. It carries no guest personal data. Calls to the endpoint are logged for operational and abuse-investigation purposes.
Guest data features. For features that process guest personal data on a hotel's behalf (for example AI-assisted content, transactional email, and abandonment recovery), the relevant sub-processor acts as Tribii's sub-processor and the Standard Contractual Clauses 2021 are applied on a Module 3 (processor-to-processor) basis where the transfer leaves the EEA.
Hotel AI Assistant. Where a hotel uses the Max-tier Hotel AI Assistant, Tribii sends aggregated, non-identifying operational figures to Google Gemini to generate answers. This is not guest personal data and no individual guest profile is transmitted.
Public data sources (not sub-processors). The Revenue Intelligence tools call public APIs for public-holiday calendars (Nager.Date) and weather outlooks (Open-Meteo). These receive only non-personal inputs (a country code, or the hotel's location and dates) and process no personal data; they are third-party data sources, not sub-processors.
6. Contact
For questions about this list or to register an objection to a planned change, contact us at contact [at] tribii [dot] com.