Sub-processors

Current sub-processors

• Vercel Inc. (USA): hosting and serverless execution of the app. The app runs in Vercel's Frankfurt (Germany) region; builds of new versions run in the USA and contain no customer data. Vercel is a US company, so access from the USA can occur under the safeguards in the Data Processing Addendum. Data: everything the app handles while a page or webhook is processed.
• Prisma Data, Inc. (Prisma Postgres, data stored in the European Union): the database that stores partners, clicks, orders, payouts, materials and encrypted payout details.
• Shopify Inc. (Canada, with data centres in several regions): the platform the app is installed on, including Shopify Billing. The app reads orders and creates discount codes through Shopify's API. Shopify acts as an independent controller for the merchant's store.
• Cloudflare, Inc. (USA, global network): domain registration and DNS for the app's domain. No application data is stored there.

Not used (yet)

We do not use an email delivery provider while the app runs in test mode. When we start sending email (account confirmation, password reset, notifications) we will add the provider here, with its location, at least 14 days before it handles merchant data.

Public data sources

Euro exchange rates for the service fee are read from the European Central Bank's public reference rates. No personal data is sent.

Changes

We update this page when a sub-processor is added or replaced and give merchants at least 14 days' notice, as described in the Data Processing Addendum. Questions: support@hypesoulaffiliate.com.