Last updated: 25 October 2026
Last updated: 2026-10-25
Some companies in our category only share their subprocessor list after a merchant files an access request. We publish ours here, openly, all the time, because a merchant deciding whether to install Tacey, and their customers, whose addresses and order details flow through it, are entitled to this answer without having to ask for it.
A subprocessor is any third-party service we rely on to help deliver Tacey. When you install Tacey, you (the merchant) are the controller of your customers’ data, and Tacey acts as your processor. Some parts of that job, hosting the application, checking an address against postal delivery records, sending an email, are themselves handled by specialist infrastructure providers. Each of those providers is a subprocessor, engaged by us, under a written agreement that requires them to protect personal data to a standard consistent with our own obligations to you.
| Subprocessor | What they do for us | Categories of data received | Location / region | DPA / security |
|---|---|---|---|---|
| Cloudflare, Inc. | Hosts the entire application: our Worker (compute), our database (D1), object storage for archived order payloads (R2), session storage (KV), and background job queues. Every piece of application data passes through Cloudflare. | All application data: shipping addresses, order metadata, customer email addresses, archived raw order payloads, merchant account data, session tokens. | United States (global edge network, see Cloudflare’s own documentation for specific data-location commitments) | cloudflare.com/trust-hub · cloudflare.com/cloudflare-customer-dpa |
| Google LLC (Address Validation API, Geocoding API) | Checks and corrects the shipping address on an order. | The shipping address text only, street, city, state/region, postal code, country. No customer name or email is sent. | United States | cloud.google.com/terms/data-processing-addendum |
| Geocodio, LLC | Checks and corrects US and Canadian shipping addresses, as an alternative or complement to Google’s validator for those regions. | The shipping address text only, street, city, state, postal code, country. No customer name or email is sent. | United States | geocod.io |
| Google LLC (Vertex AI) | Writes the answers in the Ask Tacey chat and the AI summary in the agentic readiness audit, on our free tools. Tried first. Google states that it may hold a request in memory for up to 24 hours and may log prompts to detect abuse. | Text typed into Ask Tacey, the tool result on screen, and the audited store’s name, domain and findings. No merchant data, no shipping addresses, no shopper data. The tools do not ask for personal data; anything a visitor types is sent along with the rest. | United States (us-central1) | cloud.google.com/terms/data-processing-addendum |
| Anthropic, PBC | The same free-tool answers, used only if Google could not answer. Tried second. Anthropic states that it deletes inputs and outputs within 30 days and does not use them for training by default. | The same text. No merchant data, no shipping addresses, no shopper data. | United States | anthropic.com/legal/data-processing-addendum |
| OpenRouter, Inc. | The same free-tool answers, used only if the providers above could not answer. Tried third. OpenRouter passes the text to the company that runs the model, which may keep and use it under its own terms. | The same text. No merchant data, no shipping addresses, no shopper data. | United States | openrouter.ai/privacy |
| DeepInfra (Deep Infra Inc.) | The same free-tool answers, used only if the providers above could not answer. Tried fourth. DeepInfra states that it holds requests in memory only and does not store them or use them for training, except where a Google or Anthropic model’s own policy applies. | The same text. No merchant data, no shipping addresses, no shopper data. | United States (DeepInfra’s privacy policy) | deepinfra.com/terms, which incorporates its DPA docs.deepinfra.com/account/data-privacy |
| Cloudflare, Inc. (Email Sending) | Sends transactional emails to shoppers, a link to check or edit their order, and confirmation that an edit was made. | Customer email address, order number, and the specific order/address details included in that email’s content. | United States (global edge network) | cloudflare.com/trust-hub · cloudflare.com/cloudflare-customer-dpa |
| Google Ireland Limited (Google Calendar) | Runs the demo booking calendar behind the “Book a demo” button. The calendar is not loaded onto the page until you either accept functional cookies or press the button that loads it. | Name, email address and chosen time for anyone who books a demo. No merchant data, no shipping addresses, no shopper data. | European Union and United States | cloud.google.com/terms/data-processing-addendum |
| Google Ireland Limited (Google Analytics 4) | Counts page views on tacey.app, our marketing website. Loads under Google Consent Mode and sends a cookieless ping, with no identifier stored, for any visitor who has not granted analytics. | Page views and referrer for website visitors. No merchant data, no shipping addresses, no shopper data. | European Union and United States | business.safety.google/adsprocessorterms |
| Microsoft Ireland Operations Limited (Clarity) | Session replay and heatmaps on tacey.app, our marketing website, so we can see which pages confuse people. It is never loaded unless a visitor has specifically agreed to session replay, which is a separate choice from analytics and is off by default in every country. | A recording of the visit: pages viewed, mouse movement, scrolling and clicks. No merchant data, no shipping addresses, no shopper data. | United States | microsoft.com: Products and Services Data Protection Addendum |
| PostHog, Inc. | Product analytics and page-speed measurement on tacey.app, our marketing website. Loaded only after a visitor allows analytics cookies. Session recording is switched off. | Page views, referrer, and how quickly pages rendered. No merchant data, no shipping addresses, no shopper data. | United States | posthog.com/dpa |
| Mixpanel, Inc. | Product analytics, helps us understand feature usage and improve the product. | Usage events keyed to the shop (installs, feature usage, error diagnostics). No shipping addresses, no customer data. | United States | mixpanel.com/legal/dpa |
| Ahrefs Pte. Ltd. (Ahrefs Web Analytics) | Search analytics, tells us which pages earn traffic from search engines. | Page URL, referrer and coarse device type. No cookies, no shipping addresses, no customer data. | Singapore | ahrefs.com/privacy |
| Meta Platforms Ireland Limited (Meta Pixel + Conversions API) | Measures which ads and pages on tacey.app, our marketing website, lead to an install, and lets us show ads to people who already visited. Loaded only after a visitor allows Marketing cookies; the server-side Conversions API mirror is sent only for a visitor with a recorded Marketing consent. | Advertising identifiers (_fbp, _fbc), page URL, IP address and browser user agent. No shipping addresses, no shopper data, no merchant data. A hashed email is included only when a visitor gave us one directly, such as requesting a free tool’s report by email. | European Union and United States | facebook.com/legal/terms/dataprocessing |
| Intercom, Inc. | Records merchant lifecycle events (install, reinstall, uninstall) via Intercom’s server-side Events API, and powers our help centre at help.tacey.app. | Shop domain, Shopify plan, and store country, tied to a merchant-level identifier. No shipping addresses, no shopper data. | United States (Intercom also offers EU data hosting) | intercom.com/legal/data-processing-agreement |
| Customer.io, Inc. | Maintains a merchant profile and records merchant lifecycle events, to support merchant lifecycle messaging. | Merchant email address, owner name, store name, shop domain, Shopify plan, currency, country, timezone, and locale. No shipping addresses, no shopper data. | United States | customer.io/legal/dpa |
Intercom and Customer.io are live, active subprocessors: both receive merchant account data automatically when a shop installs Tacey. Neither receives shipping addresses or any other shopper data.
Google (Vertex AI), Anthropic, OpenRouter and DeepInfra serve only the free tools on this website. None of them receives a merchant’s account data or any shopper data, so they are not Sub-processors of Shopper Data under our Data Processing Agreement. They are used under each provider’s own standard commercial terms. What each one states about retention and training is in our Privacy Policy, Section 6.5.
A cookie choice you make on this website (in the banner, the preferences modal, an opt-out, or through a Global Privacy Control signal) is not sent to any of the subprocessors above for its own purposes. We keep it as our own record, in our own database hosted by Cloudflare, so that if a decision is ever disputed we can show what was actually chosen rather than relying on memory.
That record names which categories were allowed, the region and device it came from, and the visitor’s IP address. We keep it for up to 3 years from the date of the decision. The full list of fields, and why each one is kept, is in our Privacy Policy, Section 6.4.
When we add a new subprocessor, or replace an existing one, we will:
If you are a merchant and you have a good-faith, data-protection-related objection to a new subprocessor, contact us before the effective date above. We will work with you to address the concern, which may include not routing your shop’s data to that subprocessor, or, if the concern cannot reasonably be resolved, allowing you to terminate the affected part of the service without penalty. The exact mechanism for this is set out in our Data Processing Agreement.
tacey
Install on Shopify