SpecialShelf Sub-processors
Version 1.0
Last updated: 15 October 2026
These companies process personal information for SpecialShelf so we can provide the Service. Each is bound by a written agreement with data-protection terms at least as protective as our DPA. We give Stores 30 days' notice before adding or replacing a sub-processor (by email to owners and on this page); a Store that objects may cancel and receive a pro-rata refund of prepaid fees.
| Sub-processor | Purpose | Personal information involved | Location of processing |
|---|---|---|---|
| Supabase, Inc. | Database and sign-in | All Store Data; staff emails | United States (AWS us-east-1) |
| Vercel Inc. | Application hosting | Store Data in transit while pages and requests are served | United States (Washington, D.C., iad1) |
| Inngest, Inc. | Background jobs (reminders, webhooks, summaries) | Record identifiers and job payloads, which can include message content | United States |
| Resend (Plus Five Five, Inc.) | Sending email | Recipient name and email, message content | United States (AWS us-east-1) |
| Twilio Inc. | Sending text messages | Recipient phone number, message content; the Store's business details for carrier registration | United States |
| Paddle.com Market Limited | Our reseller and merchant of record for subscriptions | Store billing contact, address, payment details (held by Paddle, not by us) — never shoppers' data | United Kingdom, and providers it uses |
| Functional Software, Inc. (Sentry) | Error tracking | Technical error data; configured to remove names, emails and phone numbers | United States — not yet in use (DEF-SENTRY) |
Not a sub-processor: Square. Square, Inc. (Block, Inc.) is the Store's own provider. SpecialShelf reads and writes the Store's Square data on the Store's instruction; Square's relationship with the Store is governed by Square's terms.