Current providers
| Provider | Purpose | Data involved | Location note |
|---|---|---|---|
| Shopify | Commerce platform, merchant authentication, app distribution, products, orders, and privacy webhooks | Merchant/shop identifiers, authorized sessions, products, variants, order and customer references | Shopify infrastructure and contracted processing locations |
| Fly.io | Application hosting and delivery | Requests and data processed by the application; operational logs | Configured hosting region and Fly.io infrastructure |
| Supabase | Managed PostgreSQL database | Merchant settings, jobs, customers, technicians, schedules, communications, evidence metadata, encrypted calendar connections | Configured project region and contracted infrastructure |
| Resend | Transactional email | Recipient, subject, message content, delivery and failure metadata | Provider infrastructure, which may include processing outside the EEA |
| Optional Calendar OAuth, busy-time checking, and Dollflow job-event synchronization | Connected account authorization, calendar identifier, busy periods, and DFI-created event data | Google’s global infrastructure and applicable regional safeguards |
Authorization and safeguards
Merchants give general authorization for these providers through the DPA. We select providers based on functionality, security, reliability, and contractual protections. Where required, we use data-processing terms and recognized transfer safeguards, including adequacy decisions or Standard Contractual Clauses.
Changes and objections
This page is the current subprocessor register. We will update it before a new provider begins materially processing Merchant personal data where reasonably practicable. A Merchant may object on reasonable data-protection grounds by emailing dollflowapp@gmail.com. We will assess alternatives in good faith.
Important distinctionShopify and Google may also act as independent controllers for portions of their own platform relationship with the Merchant or connected user. Their own notices and contractual terms govern that processing.