Subprocessors
Effective date: [OWNER: effective date]
In short
- These companies process data on our behalf to run the services.
- Each one is bound by a contract that requires protections like ours.
- We give merchants notice before adding a new one.
This list applies to Freebies Engine by Log Studio Lab and Experiment Engine by Log Studio Lab, the two products of Log Studio Lab. It supports our privacy policy and data processing agreement.
| Name | What they do | Where | Data involved |
|---|---|---|---|
| Vercel Inc. | Hosts the website, the merchant app and the API; serves static files; cookieless page analytics and field performance measurements of this website. | United States (the app runs in the Portland, Oregon region) | All data the services process while it is in transit or in memory; request metadata (IP address, URL, user agent) in hosting logs; page paths without query strings for website analytics. |
| Google LLC (Google Tag Manager and Google Analytics) | Measures how visitors use the public marketing pages, subject to the cookie banner where it applies. | United States | Page URL, referrer, approximate location from the IP address, browser and device details and a random visitor id, only on the marketing website and only after consent where the law asks for it. |
| Supabase Inc. | Production PostgreSQL database and its backups. | United States [OWNER: confirm the region of the account] | Everything we store: store configuration, offers, analytics events and order facts, Testing visitor rows, team and account records, audit logs, encrypted Shopify tokens. |
| Upstash Inc. | Redis for rate limiting and short-lived caches. | United States [OWNER: confirm the region of the account] | Counters and cache entries keyed by shop domain and by a hashed network identifier. No shopper names, emails or addresses. |
| Clerk, Inc. | Sign-in and account management for people who use the merchant app. | United States | Account email, name, sign-in method (email code or Google), session and device information for signed-in merchant users. |
| Resend, Inc. | Sends transactional email: team invitations and messages submitted through the contact form. | United States | Recipient email address, the name and message the sender typed, delivery status. |
| Better Stack (Betterstack Inc.) | Uptime monitoring of the website and the API, and error tracking for the website and the app. | United States [OWNER: confirm the region of the account] | Status and response time of public URLs. Error reports with request bodies and customer identifiers removed before sending; they may include a merchant user identifier and a shop domain. |
| Functional Software, Inc. (Sentry), paid infrastructure tier only | Not in use today. Error and performance tracking would move from Better Stack to Sentry only if we switch to the paid infrastructure tier; this page and our notice to merchants change first. | United States | If used: the same scrubbed error reports as Better Stack, with request bodies and customer identifiers removed; they may include a merchant user identifier and a shop domain. |
| cron-job.org | Triggers our scheduled jobs (analytics rollups, retention cleanup, billing sync) by calling protected endpoints on a schedule. | [OWNER: confirm the operator's location] | None. It sends a secret authorization header to our endpoints and receives only a status code. |
| Shopify Inc. and its affiliates | The commerce platform the products run on: installation, Admin API access, webhooks, billing of app subscriptions, storefront and checkout hosting. | Canada and United States | The data a merchant store holds and that our access scopes allow us to read, the app subscription charge, and the discounts and settings we write to the store. |
| GitHub, Inc. | Runs the nightly encrypted database backup job on GitHub Actions and holds the encrypted result for 14 days. | United States | An AES-256 encrypted dump of the production database. GitHub does not hold the decryption key. |
Changes to this list
We will tell merchants by email to the account owner, and update this page, at least 30 days before a new subprocessor starts processing merchant data. A merchant who objects on reasonable data protection grounds can write to us in that period and we will work with them on an alternative, and if there is none, the merchant may uninstall and cancel without penalty.
Shopify is the platform the merchant chose to run a store on. It is listed because our products exchange data with it, not because we engage it for the merchant.