Policies & standards
Sub-processors
Effective date: October 8, 2026
About this list
These providers may process personal data to help HappifyApps deliver the stated products and services. A provider is included only where its role can involve processing personal data on our behalf; merchant-directed integrations are identified separately.
Current providers
| Provider | Service | Data involved | Use |
|---|---|---|---|
| Vercel | Application hosting and scheduled jobs | Request and application data processed to operate the service | Website and Shopify apps |
| Supabase | Managed database hosting | Merchant, application, and permitted Shopify data | Shopify apps and submitted briefs |
| Resend | Transactional email delivery | Sender and recipient email addresses and message content: messages from the website’s contact, audit and support forms (including attachments you upload) and our replies; the Pick List & Low Stock digest (to the merchant) and risk-review notice (to the order’s customer, when the merchant sends it); Invoice & Packing Slip documents emailed to the order’s customer when the merchant turns that on | Website, Pick List & Low Stock, Invoice & Packing Slip |
| Google Analytics | Optional website analytics, loaded only after opt-in | Device, page, and usage signals after opt-in | Public website only |
| Google (Gemini API) | AI drafting of copy and images | Store Builder only, when the merchant uses AI on the Advanced or Pro plan: the merchant’s prompt, store name, industry, any brief entered, and the title and description of a chosen product (copy); prompt, store name and industry (images). No customer data. | Happify Store Builder |
| Hetzner | Server hosting (Falkenstein, Germany) for our self-hosted Plausible Analytics | Page-view events for the website, admin console and Shopify apps, on a server we operate. See Plausible Analytics below. | Website, admin and Shopify apps |
| Plausible Analytics (self-hosted by HappifyApps) | Cookieless page-view counting; software we run ourselves on the Hetzner server, so no analytics vendor receives the data | Page address and the visitor’s IP address and browser details. IP and browser are hashed into a daily visitor id and are not stored. From the Shopify apps and the admin console, only the page’s origin and path are sent. The website uses the standard Plausible script, which also records campaign parameters and the referring page. No cookies are set. | Website, admin and Shopify apps |
| Klaviyo | Merchant-connected messaging | Customer email and segment membership selected by the merchant | RepeatIQ only, when connected |
Merchant-directed integrations
Klaviyo receives data only when a RepeatIQ merchant connects its own account and directs the transfer. The merchant remains responsible for configuring that account and its communications lawfully.
Provider locations and transfers
Providers may process data in the region selected for the service and in other locations described in their service terms. Where required, we use provider data-processing terms and an applicable transfer mechanism. Contact us for information relevant to a specific product and merchant arrangement.
Provider changes
We update this page when a provider with access to personal data is added or its role materially changes. Merchants needing advance notice and an objection process can request those terms through a signed data processing agreement.
Questions or objections
Contact privacy@happifyapps.com and identify the affected product. See our Data Processing Terms and Security page.