Sub-processors and third-party services
The providers that may process personal data to deliver IziStore, their role and their location.
- Last updated :
- August 5, 2026
- In force since :
- August 5, 2026
- Published by :
- WeKrea LLC
In short
- Every provider is bound by protection obligations equivalent to our Data Processing Agreement.
- Any change to this list is published here with 30 days notice.
- Platforms you connect yourself (Shopify, WooCommerce, YouCan, Meta, Google) are your own services, not our sub-processors.
1. Infrastructure
| Provider | Role | Data involved | Location |
|---|---|---|---|
| Contabo GmbH | Hosting of application servers and the primary database | All platform data | Germany (EU) |
| Supabase | Database and authentication (self-hosted instance; managed instance as failover) | Accounts, stores, orders, messages | EU / United States |
| Cloudflare, Inc. | DNS, bot protection, delivery and TLS certificates, domain registration | Connection metadata, IP addresses | Global network |
| Bunny.net | CDN and media storage (product images, training videos) | Files published by merchants | EU / global network |
2. Communication
| Provider | Role | Data involved | Location |
|---|---|---|---|
| Resend | Transactional email (verification, notifications, reports) | Email address, name, message content | United States / EU |
| WAHA and SterChat | WhatsApp gateways (number pairing, sending and receiving) | Numbers, conversation content, media | Infrastructure managed by us (EU) |
| Telegram | Operational notifications and reports to your channels | Chat identifiers, notification content | Global network |
| Web Push (browsers) | In-app push notifications | Browser subscription token | Global network |
3. Payments
| Provider | Role | Data involved | Location |
|---|---|---|---|
| Moneroo | Collection (mobile money, card) for subscriptions and stores | Name, contact, amount, transaction reference | West Africa / EU |
| Stripe, Inc. | Card collection and subscriptions | Name, email, tokenised payment data | United States / EU |
Full card numbers never pass through our servers: they are entered with the payment provider.
4. Artificial intelligence
| Provider | Role | Data involved | Location |
|---|---|---|---|
| OpenAI | Text and image generation, transcription | Content sent to the feature used | United States |
| Google (Gemini) | Text and image generation, multimodal analysis | Content sent to the feature used | United States / EU |
| DeepSeek | Text generation and reasoning | Content sent to the feature used | Outside the EU |
| OpenRouter | Routing to third-party models | Content sent to the feature used | United States |
These providers are contractually bound not to use submitted content to train their models. You can disable AI features or configure your own provider key.
5. Platforms you connect yourself
Shopify, WooCommerce, YouCan, Meta (Facebook, Instagram, WhatsApp Business), Google (Sheets, Gmail) and carriers are not our sub-processors: they are your own services, to which you grant us access. Their processing is governed by their terms and your contract with them.
We access only the data required by the features you enable, and we stop accessing it as soon as the authorisation is revoked.
6. Change notification
Any addition or replacement of a sub-processor is published on this page at least thirty (30) days before it goes live. To receive an email alert, write to [email protected] with the subject "Sub-processors".
List last updated: 2026-08-05.