Sub-processors

Everyone outside our own company who touches data on our behalf, and what for. We give you thirty days' notice before a new sub-processor is added, so you can object or uninstall.

Sub-processor	What for	Where the data sits
Hostinger International Limited	Servers, database and background jobs	Frankfurt, Germany
Cloudflare, Inc.	Serving the widget and the offer configuration	Global edge network

Shopify is not on this list. Shopify is the platform you already have your own agreement with, and our data reaches us through it rather than from us to them.

A supplier that receives no personal data

Supplier	What for	Where
OpenAI OpCo, LLC	Suggesting wording for offers and summarising your figures, only when you use those features	United States

OpenAI is sent product names, the product type, the discount, your store's language, and the counts and totals for a period. Never anything about a shopper: no order number, no customer number, no session or cart identifier. Every request is checked for those before it leaves, and is not sent if it has any. OpenAI does not train its models on what we send, and may keep it for up to 30 days to check for abuse before deleting it. Because none of it is personal data, OpenAI is not a sub-processor, and it is listed here so that you know where your product names go.

What is deliberately not here

We do not use an analytics service, an advertising network, a session recorder or a customer data platform. The numbers in your dashboard are counted by us from your own orders, which is the whole argument of this product and would be worth very little if the counting happened somewhere else. The AI summary only reads those numbers out; it does not count them.

Last changed 2 October 2026.