These are the third parties that may handle personal data on our behalf when you use Inner Circle. Each is bound by a written contract to process data only on our instructions and to keep it secure.
We notify merchants by email at least 30 days before adding a new sub-processor, so there is time to object. Objecting is grounds to terminate without penalty, as set out in the Data Processing Addendum.
Current sub-processors
| Provider | Role | What it handles | Location of data |
|---|---|---|---|
| Shopify Inc. (Canada) | The commerce platform the app runs on | Store and staff details, customer records read through the API, customer tags and draft orders written back, Flow events | Global, per Shopify's infrastructure |
| Neon Inc. (United States) | Managed PostgreSQL database | Everything the app stores: settings, locks, access codes, access requests, marketing consent, waitlist entries, drop notifications, access tiers, granted access, member invites, creator campaigns, activity logs | European Union, Frankfurt (eu-central-1) |
| Vercel Inc. (United States) | Application hosting and compute | Data in transit while requests are being handled. No long-term storage. | European Union, Frankfurt (fra1) |
| Resend (Plus Five Five, Inc.) (United States) | Delivering the email the app sends, and the messages our contact form sends us | Recipient email addresses and the contents of the messages: access codes, unlock links, request confirmations, drop announcements and merchant notifications, plus the name, email address, store address and message someone sends through our website's contact form | European Union, Ireland (eu-west-1) |
| Cloudflare, Inc. (United States) | Hosting for our public website | Nothing from the app. Only what someone types into our contact form, in transit, plus the country the request came from. | Served from the location nearest the visitor |
| Google Ireland Limited (Ireland) | Analytics for our public website, through Google Analytics and Google Tag Manager | Nothing from the app, and nothing at all unless a visitor to our website consents. Then: pages viewed, approximate location from a truncated IP address, browser and device type, and a randomly generated identifier for the browser. | European Union, with onward transfer to the United States under the EU–US Data Privacy Framework |
| tawk.to Inc. (United States) | The support chat on the app's own pages inside the Shopify admin | What a merchant's staff type into the chat, any name or email address they give with it, and the shop domain the app passes so we know which store we are talking to. Nothing from a storefront, and no shopper data. | United States |
Four notes on that list.
Resend handles shopper email addresses. Shopify gives apps no general way to send email to a customer, so the app sends it, which means the recipient's address and the message pass through Resend. The message goes out under the merchant's shop name with the merchant's address for replies; only the technical sending address is ours. A merchant who configures their own SMTP server or Resend account in the app's settings takes delivery over entirely, and our Resend account is then not involved in their store's email at all.
Cloudflare is here only because of our website. No merchant or shopper data from the app reaches it.
Google is here only because of our website, and only with consent. It has no access to anything in the app: not a store, not a customer, not an access code. It sees people reading our marketing and legal pages, and only those who agreed to be counted. A merchant who installs Inner Circle is not sending their shoppers' data to Google through us.
tawk.to sees a conversation, not a store. It cannot reach the database, the API or anything the app holds. What it has is what a merchant chose to type to us, plus the shop domain, which we pass deliberately so a question arrives already attached to the store asking it. tawk.to processes in the United States and relies on the EU–US Data Privacy Framework for European data; their own terms are at tawk.to/data-protection (opens in a new tab). A merchant who never opens the chat gives it nothing but the fact that their browser loaded the widget.
Merchant-selected providers
These are not our sub-processors. They apply only if a merchant switches email delivery away from the Shopify default in the app's settings, and the merchant is responsible for their own agreement with them.
| Provider | When it applies | What it handles |
|---|---|---|
| Resend | The merchant selects Resend as their email provider | The content of outgoing messages, and recipient email addresses |
| The merchant's own SMTP server | The merchant configures SMTP | The content of outgoing messages, and recipient email addresses |
Changes
| Date | Change |
|---|---|
| 20 August 2026 | Neon's entry corrected: the record types it holds now name marketing consent, which the app began recording when the Klaviyo integration shipped. No sub-processor was added and none was changed, so no notice period applies. |
| 13 August 2026 | Vercel's compute moved from the United States to the European Union, in Frankfurt, beside the database. No sub-processor was added and none was changed, so no notice period applies, and the change narrows where data goes rather than widening it. |
| 13 August 2026 | Neon's entry corrected: the record types it holds now name member invites and creator campaigns, both of which the app began storing after this list was last written. |
| 11 August 2026 | tawk.to Inc. added, for the support chat inside the app's admin pages. Added before the app was listed, so it forms part of the initial disclosure rather than an addition needing 30 days' notice. |
| 11 August 2026 | Google Ireland Limited added, for consent-gated analytics on our public website. Nothing from the app reaches it. |
| 11 August 2026 | Resend's entry corrected: it also delivers the email the app sends to shoppers, which this list previously said reached no shopper data. It has done so since the app's first release. |
| 3 August 2026 | Cloudflare and Resend added, for the website contact form |
| 3 August 2026 | Initial list published |