Supabase, Inc.
Purpose: PostgreSQL database and object storage when the final Storage release gate is enabled. Data may include provider accounts, campaigns, daily spend, sync state, encrypted OAuth credentials, calculations, audit records and generated exports.
Processing countries: Germany, United States of America and Singapore.
DigitalOcean, LLC
Purpose: API, worker, scheduler and local Redis hosting. Data may include store operational and financial data, ads-derived calculations, alert data and encrypted provider credentials in application memory.
Processing countries: Germany and United States of America.
Google LLC
Purpose: Cloud KMS, Secret Manager and Firebase Cloud Messaging. Data may include application secrets, cryptographic operations, push payloads and device-token delivery metadata.
Processing countries: Germany, Ireland and United States of America.
Twilio Inc. (SendGrid)
Purpose: transactional email and email delivery events. Data may include recipient address, notification content and delivery metadata.
Processing countries: United States of America and Germany.
Slack Technologies, LLC
Purpose: optional merchant-enabled Slack notifications. Data may include alert summaries, workspace and channel identifiers, and delivery metadata.
Processing countries: United States of America, Germany, France and Ireland.
Apple Inc.
Purpose: Apple Push Notification service for iOS. Data may include push payloads, device tokens and delivery metadata.
Processing country: United States of America.
Changes and questions
MarginPatrol reviews this list when providers, regions or data paths change and will provide notice of material changes where required.
Questions about subprocessors can be sent to support@marginpatrol.com.