Subprocessors

Source platform — the merchant installs DropifyXL on their Shopify store and grants read-only access to catalog, orders, customers, and visitor events.

Managed Postgres database — primary store for shop, product, order, customer, recommendation, and newsletter data. Encrypted at rest (AES-256), encrypted in transit (TLS).

Hosts the embedded Shopify app + the marketing site. Receives request metadata and application logs only — no merchant data persists on Vercel.

Runs the standalone cron server that triggers scheduled jobs on the Vercel-hosted app. No merchant data is stored on DigitalOcean.

Sends email on our behalf: merchant-facing messages (welcome, weekly and daily digest, trial-ending reminder, plan change, unsubscribe confirmation, newsletter) and, on Plus, the customer-outreach emails a merchant chooses to send from inside the app. Processes recipient email addresses and rendered message bodies.

Polishes recommendation copy when LLM_PROVIDER=openai. Receives only rule-level structured data (e.g. product title, counts, percentages) — never raw order or customer records. One exception: when a Plus merchant asks us to draft an email to a specific customer, that request also carries the recipient's first name, and nothing else about them.

Alternative LLM provider — used when LLM_PROVIDER=gemini. Same scope as OpenAI: rule-level structured data, plus the recipient's first name on Plus draft-email requests.

LLM provider for Pro and Plus recommendation copy. Same scope as OpenAI and Gemini: rule-level structured data — never raw order or customer records — plus the recipient's first name on Plus draft-email requests.