Home Legal Sub-processors

Sub-processors

Every third party that may handle personal data on our behalf and where it sits, the providers you choose yourself, and how we tell you when it changes.

Last updated 20 August 2026 · Applies to the Inner Circle Shopify app

These are the third parties that may handle personal data on our behalf when you use Inner Circle. Each is bound by a written contract to process data only on our instructions and to keep it secure.

We notify merchants by email at least 30 days before adding a new sub-processor, so there is time to object. Objecting is grounds to terminate without penalty, as set out in the Data Processing Addendum.

Current sub-processors

ProviderRoleWhat it handlesLocation of data
Shopify Inc. (Canada)The commerce platform the app runs onStore and staff details, customer records read through the API, customer tags and draft orders written back, Flow eventsGlobal, per Shopify's infrastructure
Neon Inc. (United States)Managed PostgreSQL databaseEverything the app stores: settings, locks, access codes, access requests, marketing consent, waitlist entries, drop notifications, access tiers, granted access, member invites, creator campaigns, activity logsEuropean Union, Frankfurt (eu-central-1)
Vercel Inc. (United States)Application hosting and computeData in transit while requests are being handled. No long-term storage.European Union, Frankfurt (fra1)
Resend (Plus Five Five, Inc.) (United States)Delivering the email the app sends, and the messages our contact form sends usRecipient email addresses and the contents of the messages: access codes, unlock links, request confirmations, drop announcements and merchant notifications, plus the name, email address, store address and message someone sends through our website's contact formEuropean Union, Ireland (eu-west-1)
Cloudflare, Inc. (United States)Hosting for our public websiteNothing from the app. Only what someone types into our contact form, in transit, plus the country the request came from.Served from the location nearest the visitor
Google Ireland Limited (Ireland)Analytics for our public website, through Google Analytics and Google Tag ManagerNothing from the app, and nothing at all unless a visitor to our website consents. Then: pages viewed, approximate location from a truncated IP address, browser and device type, and a randomly generated identifier for the browser.European Union, with onward transfer to the United States under the EU–US Data Privacy Framework
tawk.to Inc. (United States)The support chat on the app's own pages inside the Shopify adminWhat a merchant's staff type into the chat, any name or email address they give with it, and the shop domain the app passes so we know which store we are talking to. Nothing from a storefront, and no shopper data.United States

Four notes on that list.

Resend handles shopper email addresses. Shopify gives apps no general way to send email to a customer, so the app sends it, which means the recipient's address and the message pass through Resend. The message goes out under the merchant's shop name with the merchant's address for replies; only the technical sending address is ours. A merchant who configures their own SMTP server or Resend account in the app's settings takes delivery over entirely, and our Resend account is then not involved in their store's email at all.

Cloudflare is here only because of our website. No merchant or shopper data from the app reaches it.

Google is here only because of our website, and only with consent. It has no access to anything in the app: not a store, not a customer, not an access code. It sees people reading our marketing and legal pages, and only those who agreed to be counted. A merchant who installs Inner Circle is not sending their shoppers' data to Google through us.

tawk.to sees a conversation, not a store. It cannot reach the database, the API or anything the app holds. What it has is what a merchant chose to type to us, plus the shop domain, which we pass deliberately so a question arrives already attached to the store asking it. tawk.to processes in the United States and relies on the EU–US Data Privacy Framework for European data; their own terms are at tawk.to/data-protection (opens in a new tab). A merchant who never opens the chat gives it nothing but the fact that their browser loaded the widget.

Merchant-selected providers

These are not our sub-processors. They apply only if a merchant switches email delivery away from the Shopify default in the app's settings, and the merchant is responsible for their own agreement with them.

ProviderWhen it appliesWhat it handles
ResendThe merchant selects Resend as their email providerThe content of outgoing messages, and recipient email addresses
The merchant's own SMTP serverThe merchant configures SMTPThe content of outgoing messages, and recipient email addresses

Changes

DateChange
20 August 2026Neon's entry corrected: the record types it holds now name marketing consent, which the app began recording when the Klaviyo integration shipped. No sub-processor was added and none was changed, so no notice period applies.
13 August 2026Vercel's compute moved from the United States to the European Union, in Frankfurt, beside the database. No sub-processor was added and none was changed, so no notice period applies, and the change narrows where data goes rather than widening it.
13 August 2026Neon's entry corrected: the record types it holds now name member invites and creator campaigns, both of which the app began storing after this list was last written.
11 August 2026tawk.to Inc. added, for the support chat inside the app's admin pages. Added before the app was listed, so it forms part of the initial disclosure rather than an addition needing 30 days' notice.
11 August 2026Google Ireland Limited added, for consent-gated analytics on our public website. Nothing from the app reaches it.
11 August 2026Resend's entry corrected: it also delivers the email the app sends to shoppers, which this list previously said reached no shopper data. It has done so since the app's first release.
3 August 2026Cloudflare and Resend added, for the website contact form
3 August 2026Initial list published