Policies & standards
Sub-processors
Effective date: October 17, 2026
About this list
These providers may process personal data to help HappifyApps deliver the stated products and services. A provider is included only where its role can involve processing personal data on our behalf; merchant-directed integrations are identified separately.
Current providers
| Provider | Service | Data involved | Use |
|---|---|---|---|
| Supabase | Managed database hosting | Merchant, application, and permitted Shopify data | Shopify apps and submitted briefs |
| Resend | Transactional email delivery | Sender and recipient email addresses and message content: messages from the website’s contact, audit and support forms (including attachments you upload) and our replies; payment receipts and refund confirmations for website checkouts (to the payer and to our sales inbox); the Pick List & Low Stock digest (to the merchant) and risk-review notice (to the order’s customer, when the merchant sends it); Invoice & Packing Slip documents emailed to the order’s customer when the merchant turns that on | Website, Pick List & Low Stock, Invoice & Packing Slip |
| Razorpay | Payment processing for website checkouts (India) | The payer’s name, email address and phone number (phone is optional) that you enter at checkout; the payment details you enter in Razorpay’s checkout window, such as card, UPI or bank details, which Razorpay processes and we do not receive; the order amount, currency and the item bought. Razorpay returns to us the payment and order ids, status, amount, the payer’s email and phone, and any refund. | Website checkout for store kits and services, and refunds |
| Google Analytics | Optional website analytics, loaded only after opt-in | Device, page, and usage signals after opt-in | Public website only |
| Google (Gemini API) | AI drafting of copy and images | Store Builder only, when the merchant uses AI on the Advanced or Pro plan: the merchant’s prompt, store name, industry, any brief entered, and the title and description of a chosen product (copy); prompt, store name and industry (images). No customer data. | Happify Store Builder |
| Hetzner | Server hosting (Falkenstein, Germany) for the website, the admin console, the Shopify apps and their scheduled jobs, and for our self-hosted Plausible Analytics | Request and application data processed to operate the service, and page-view events, on a server we operate. See Plausible Analytics below. | Website, admin and Shopify apps |
| Plausible Analytics (self-hosted by HappifyApps) | Cookieless page-view counting; software we run ourselves on the Hetzner server, so no analytics vendor receives the data | Page address and the visitor’s IP address and browser details. IP and browser are hashed into a daily visitor id and are not stored. From the Shopify apps and the admin console, only the page’s origin and path are sent. The website uses the standard Plausible script, which also records campaign parameters and the referring page. No cookies are set. | Website, admin and Shopify apps |
| Klaviyo | Merchant-connected messaging | Customer email and segment membership selected by the merchant | Reorder Predictions only, when connected |
Merchant-directed integrations
Klaviyo receives data only when a Reorder Predictions merchant connects its own account and directs the transfer. The merchant remains responsible for configuring that account and its communications lawfully.
Provider locations and transfers
Providers may process data in the region selected for the service and in other locations described in their service terms. Where required, we use provider data-processing terms and an applicable transfer mechanism. Contact us for information relevant to a specific product and merchant arrangement.
Provider changes
We update this page when a provider with access to personal data is added or its role materially changes. Merchants needing advance notice and an objection process can request those terms through a signed data processing agreement.
Questions or objections
Contact privacy@happifyapps.com and identify the affected product. See our Data Processing Terms and Security page.