Version: 1.1
Effective Date: September 22, 2026
PeopleEvo is a business-to-business software-as-a-service platform provided by NyxDay Inc. ("PeopleEvo," "NyxDay," "we," "us," or "our").
We use certain third-party service providers to help provide, secure, support, maintain, and operate the PeopleEvo Service.
Where a third-party service provider Processes Personal Information contained in Customer Data on behalf of NyxDay Inc. in connection with providing PeopleEvo, we refer to that provider as a "Subprocessor."
This page identifies PeopleEvo's current material Subprocessors and provides information regarding international Processing, optional third-party integrations, and related data-location practices.
1. Current Material Subprocessors
| Subprocessor | Service and Purpose | Categories of Data | Primary Processing Location |
|---|---|---|---|
| Vercel | Application hosting, server-side application execution, network delivery, and related infrastructure used to operate the PeopleEvo website, applications, and API | Customer Data and technical information transmitted through or Processed by the PeopleEvo applications and API | Primarily United States; additional Processing may occur through Vercel and its authorized subprocessors |
| Neon | Managed PostgreSQL database hosting used to store PeopleEvo application data | Account information, Customer information, employee information, leave and absence data, configuration information, subscription metadata, audit records, and other structured application data | AWS US East (N. Virginia), United States |
| Cloudflare — R2 | Object storage used for Customer-uploaded files and attachments | Uploaded attachments, associated object metadata, and related storage information | Eastern North America (ENAM) |
| Resend | Transactional email delivery, including account, authentication, invitation, notification, and other Service-related communications | Recipient names and email addresses, email content, notification information, and related delivery metadata | Primarily United States and other locations used by Resend and its authorized subprocessors |
| Zoho — Zoho Desk | Customer-support portal, support ticket management, and support communications | Support contact information, email addresses, support communications, ticket metadata, and files or Customer Data voluntarily included in support requests | Canada |
Sentry (Functional Software, Inc.)|Application error monitoring, exception diagnostics, release/source-map processing, and technical troubleshooting used to identify and investigate application failures|Technical and diagnostic information such as exception/error metadata, stack traces and source locations, application route or request metadata, request identifiers, deployment environment and release information, and limited opaque internal user or Company identifiers where applicable. PeopleEvo is configured to exclude request and response bodies, cookies, authorization headers, names, email addresses, leave content, and other unnecessary Customer Data from Sentry events.|United States; additional Processing may occur through Sentry and its authorized subprocessors|
The precise information Processed by a Subprocessor depends on:
- how a Customer configures and uses PeopleEvo;
- whether the relevant functionality is used;
- the nature of Customer Data entered into the Service; and
- the technical role performed by the Subprocessor.
A Subprocessor does not necessarily receive access to all Customer Data.
2. Customer Support and Zoho Desk
PeopleEvo may provide Customer support through channels that include our support portal at:
help.peopleevo.com
The support portal is currently provided using Zoho Desk.
Information submitted through the support portal may include:
- name and contact information;
- Customer organization information;
- support-ticket content;
- correspondence with PeopleEvo support;
- screenshots or other files voluntarily attached to a request;
- technical information relevant to troubleshooting; and
- Customer Data that a Customer or authorized user voluntarily chooses to include.
Customers and users should avoid including unnecessary sensitive Personal Information in:
- support requests;
- screenshots;
- attachments; or
- other support communications.
Where troubleshooting requires NyxDay personnel to access Customer Data or a Customer's PeopleEvo environment, such access will be limited to legitimate support, security, maintenance, troubleshooting, or compliance purposes and will remain subject to applicable access controls and confidentiality obligations.
3. Optional Third-Party Integrations
PeopleEvo supports optional integrations with:
- Google Calendar; and
- Microsoft Outlook / Microsoft 365 Calendar.
These integrations are enabled only at the direction of the Customer or an authorized user.
Where an integration is enabled, PeopleEvo may exchange information reasonably necessary to provide the integration, such as:
- calendar event information;
- leave dates;
- event titles or descriptions;
- timezone information;
- identifiers required to maintain synchronization;
- integration status information; and
- authorization credentials or tokens required to maintain the connection.
Customer-directed external integration providers are generally treated separately from PeopleEvo's infrastructure Subprocessors where the Customer or authorized user independently elects to connect the external service.
Information transmitted to or Processed by an external integration provider may be subject to that provider's own:
- terms;
- privacy policy;
- data-location practices;
- security practices; and
- service availability.
Customers are responsible for determining whether enabling an optional integration is appropriate for their organization, personnel, and applicable legal requirements.
Customers or authorized users may disconnect supported integrations through PeopleEvo or through the applicable third-party service where such functionality is available.
NyxDay does not guarantee that an optional third-party integration will remain available indefinitely.
If an external provider changes, restricts, suspends, or discontinues its API, authorization requirements, technical capabilities, commercial terms, or service, NyxDay may modify, suspend, replace, or discontinue the affected PeopleEvo integration as reasonably necessary.
4. Payment and Merchant-of-Record Services
PeopleEvo may use Paddle to provide payment processing, subscription billing, transaction documentation, applicable tax handling, and related Merchant-of-Record services for standard online subscriptions.
Depending on the applicable transaction and implementation, Paddle may Process information such as:
- Customer or purchaser information;
- billing information;
- transaction information;
- payment-method information;
- tax-related information;
- subscription information; and
- payment status.
Payment information entered directly into Paddle's payment environment is Processed by Paddle under its own applicable terms and privacy practices.
Paddle is identified separately from the infrastructure Subprocessors listed in Section 1 because its role as payment provider or Merchant of Record may differ from the role of a Subprocessor Processing Customer Data on NyxDay's behalf.
5. Website Security Technologies
Our public website may use Cloudflare Turnstile or similar security technologies to help distinguish legitimate visitors and submissions from automated or abusive activity.
Such services may Process technical information, including:
- network information;
- IP-related information;
- browser or request information;
- security-verification information; and
- other information reasonably necessary to perform bot or abuse prevention.
These technologies are generally used for website security and are treated separately from PeopleEvo's Customer Data infrastructure Subprocessors where they do not Process Customer Data on behalf of a Customer.
Additional information about cookies, analytics, advertising, security technologies, and similar processing is provided in the PeopleEvo Privacy Policy and, where applicable, related cookie disclosures or preference controls.
6. International Processing
PeopleEvo is operated from Canada and is intended to support Customers in multiple countries and regions.
Customer Data and other Personal Information may therefore be Processed outside the country, province, state, territory, or other jurisdiction in which the Customer or individual is located.
PeopleEvo's current standard infrastructure includes Processing in:
- Canada;
- the United States; and
- object storage within Cloudflare's Eastern North America (ENAM) region.
Additional Processing may occur in locations used by our Subprocessors and their authorized service providers.
Where information is Processed outside the Customer's jurisdiction, it may become subject to the laws of the jurisdiction in which it is Processed, including lawful access requirements applicable to courts, regulators, law-enforcement agencies, or other public authorities.
NyxDay uses contractual or other appropriate safeguards relating to Subprocessor Processing and international transfers where required by applicable law.
Use of PeopleEvo by a Customer located in a particular jurisdiction does not by itself mean that Customer Data will be stored or Processed exclusively in that jurisdiction.
7. Data Residency and Regional Deployments
The standard PeopleEvo Service does not include a guarantee that Customer Data will be stored or Processed exclusively within:
- the Customer's country;
- a particular province or state;
- a Customer-selected cloud region;
- a particular data centre; or
- any other Customer-selected jurisdiction.
Any requirement for:
- regional hosting;
- country-specific data residency;
- dedicated infrastructure;
- alternative database or object-storage providers;
- Customer-specific deployment;
- private-cloud deployment;
- additional encryption or key-management requirements;
- industry-specific infrastructure requirements; or
- other specialized Processing arrangements
must be expressly assessed and agreed with NyxDay in writing.
Such arrangements:
- are not included in the standard PeopleEvo Essential or Professional Service unless expressly stated otherwise;
- may require additional technical, security, legal, or commercial assessment;
- may require a separate agreement;
- may require additional fees; and
- may not be available in every jurisdiction or configuration.
Customers with mandatory data-residency or localization requirements should contact PeopleEvo before entering Customer Data subject to those requirements.
8. Subprocessor Management
NyxDay selects Subprocessors based on factors that may include:
- technical capability;
- security practices;
- privacy and data-protection commitments;
- operational requirements;
- reliability;
- service availability;
- contractual terms;
- geographic availability; and
- suitability for the PeopleEvo Service.
Where appropriate, NyxDay requires Subprocessors that Process Personal Information contained in Customer Data on our behalf to be subject to contractual or other obligations concerning:
- confidentiality;
- security;
- data protection; and
- Processing appropriate to their role.
Subprocessors may themselves engage authorized service providers or subprocessors in accordance with their applicable contractual, privacy, and data-processing arrangements.
NyxDay does not represent that every downstream service provider used by a listed Subprocessor will be separately listed on this page.
Customers may review a Subprocessor's own applicable subprocessor disclosures where additional downstream-provider information is required.
9. Changes to Subprocessors
PeopleEvo's infrastructure and service providers may change as the Service evolves.
NyxDay may:
- appoint a new Subprocessor;
- replace an existing Subprocessor;
- discontinue use of a Subprocessor;
- modify a Subprocessor's purpose;
- change an applicable Processing location; or
- change the underlying infrastructure used to provide the Service.
NyxDay will maintain this page as the current public list of material PeopleEvo Subprocessors.
Unless applicable law or a separately agreed contractual term requires another method, publication of an updated Subprocessor List on this page constitutes notice of the then-current list.
Where an applicable Data Processing Addendum ("DPA") or Applicable Data Protection Law requires prior notice of a material new or replacement Subprocessor, NyxDay may provide such notice through:
- email;
- an in-Service notice;
- an update to this page;
- another website notice; or
- another reasonable electronic communication method permitted by applicable law.
Any applicable Customer right to object to a new Subprocessor is governed by the PeopleEvo DPA or other applicable written agreement.
10. Customer Responsibilities
Customers are responsible for determining whether their use of PeopleEvo complies with laws and requirements applicable to their organization, including requirements relating to:
- privacy;
- employment;
- workplace information;
- Personal Information;
- sensitive information;
- data localization;
- international transfers;
- industry-specific requirements; and
- third-party integrations.
Customers are responsible for determining whether:
- PeopleEvo's standard Processing locations are appropriate;
- an optional third-party integration should be enabled;
- a privacy impact assessment or similar review is required;
- employee or workforce notices are required;
- particular types of Personal Information may be entered into PeopleEvo; and
- additional contractual or technical safeguards are required.
Customers must not use PeopleEvo to Process information requiring specialized legal, hosting, security, certification, or localization controls beyond those expressly provided by the applicable PeopleEvo Service unless NyxDay has expressly agreed to those requirements in writing.
11. No Guarantee of Third-Party Continuity
Third-party infrastructure providers, Subprocessors, payment providers, integrations, and other external services operate independently from NyxDay.
Their:
- technologies;
- APIs;
- infrastructure;
- commercial offerings;
- Processing locations;
- subprocessors;
- terms;
- security practices; and
- service availability
may change from time to time.
NyxDay may take reasonable steps to adapt PeopleEvo when such changes affect the Service but does not guarantee that a particular third-party provider, integration, region, or technical dependency will remain available indefinitely.
Where reasonably necessary, NyxDay may replace or reconfigure a provider or Service component, subject to applicable contractual and legal obligations.
12. Relationship to the DPA and Privacy Policy
This page is intended to provide transparency regarding PeopleEvo's current material Subprocessors and international Processing practices.
It should be read together with the:
- PeopleEvo Privacy Policy;
- PeopleEvo Terms and Conditions; and
- PeopleEvo Data Processing Addendum, where applicable.
If there is a conflict regarding the contractual Processing or protection of Personal Information contained in Customer Data, the applicable DPA governs to the extent provided in that DPA.
This page does not independently create:
- a service-level agreement;
- a data-residency commitment;
- a guarantee concerning a third-party service;
- a separate liability cap;
- a right to a particular infrastructure provider; or
- a Customer right to approve every operational or infrastructure change,
except where such a right is expressly provided by applicable law or an applicable written agreement.
13. Questions
Questions regarding PeopleEvo's Subprocessors, international Processing, or data-location practices may be directed to:
Privacy Officer
NyxDay Inc. — PeopleEvo
Nova Scotia, Canada
Email: privacy@peopleevo.com