Current subprocessors
| Subprocessor | Purpose | Data | Region / transfer |
|---|---|---|---|
| Anthropic | AI generation (Claude) | Prompts, store content and images passed to generation (for example style reference photos) | USA (SCC / DPF) |
| Stripe | Connect payments for your stores' end customers | Billing and payment data | USA / EEA (SCC) |
| Paddle | Checkout and billing for Vendmint purchases (merchant of record) | Billing and payment data | United Kingdom / USA (SCC / UK Addendum) |
| InPost | Parcel-locker delivery for orders in your stores (when enabled) | End customer's name, phone and chosen pickup point | Poland (EEA) |
| Brevo | Transactional email (activation, password reset, notifications) and — on your behalf — discount-code emails to your stores' end customers, when you enable a form autoresponder | Email address, name, message content | France (EEA) |
| RapidAPI | API intermediary for importing product data (e.g. AliExpress) on your instruction | URL of the imported product; public product content in the response | USA (SCC) |
| Cloudflare R2 / S3 | Storage for media and builds | Media, store files | USA / EU (SCC / DPF) |
| Hetzner (VPS) | Hosting: API, worker, database, panel and edge (self-hosted) | All categories | Germany (EEA) |
| Sentry | Error monitoring | Diagnostic logs, stack traces | USA (SCC) |
| Pexels | Stock photos | Search query, no personal data | USA |
Changes
We keep this list up to date. Where you have a Data Processing Agreement with us, we notify you of intended changes so you can object on justified data-protection grounds.
Related documents
Still have a question?
If anything here is unclear, we would rather explain it than leave you guessing.