Subprocessors
Our legal documents
We're careful about who we partner with. Our partners enable us to provide our services to the world and they need to align with our values and policies around data. All partners are GDPR-compliant frameworks.
Core processors
| Subprocessor | Service provided | Headquartered | Data processed |
|---|---|---|---|
| AppSignal (policy) |
Server operation metrics and bug detection | Netherlands, Europe | Customer personal data if necessary to log errors |
| Cloud 66 (policy) |
Web infrastructure management and deployments | USA | System infrastructure |
| Google Cloud Platform (policy) |
Cloud computing and database management | USA | All application data |
| Mongo DB (policy) |
Database storage | USA | All application data |
| Netlify (policy) |
Website deployment and hosting | USA | System infrastructure |
Shopify app processors
| Subprocessor | Service provided | Headquartered | Data processed |
|---|---|---|---|
| Atlassian (policy) |
Application operational status reporting | USA | System outage reports |
| SentinelOne (policy) |
Server application logging | USA | Personal customer data when necessary for debugging |
| Intercom (policy) |
Customer support communication and announcements/td> | USA | Merchant account information |
| Linode (policy) |
Web services and data storage | USA | All application data |
| Twilio (policy) |
Email communications | USA | Personal customer information when requested |
| Shopify (policy) |
E-commerce platform | Canada | Personal customer information |
Other app processors
| Subprocessor | Service provided | Headquartered | Data processed |
|---|---|---|---|
| Amazon Web Services (policy) |
Web storage and content delivery | USA | Customer uploaded media |
| Datadog (policy) |
Server operation metrics and bug detection | USA | Customer personal data if necessary to log errors |
| Google Analytics (policy) |
In-app usage monitoring by merchants and visitors to our websites | USA | Website behavior |
| Hotjar (policy) |
User experience reports and analytics | Malta, Europe | Anonymized recordings and heatmaps of user interactions |
| Cloudinary (policy) |
Media file storage and file manipulation | USA | Customer-uploaded media |
| Wildbit (policy) |
System email notifications | Canada | Customer personal information when requested |
We will update these lists as we find new partners to work with and update merchants with the changes, as required under GDPR.