Sub-processors
Sub-processors
This page lists every third-party service we currently rely on to deliver the Unified Orders platform. We refer to these as “sub-processors” in the sense of UK GDPR Article 28 — entities that process personal data on our behalf in order for us to deliver the service to you.
We will update this list before adding or replacing a sub-processor that processes personal data, and we will notify paying customers of material changes with at least 30 days’ notice via email.
Hosting & infrastructure
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Railway | Application hosting; primary PostgreSQL database; Redis (BullMQ job queues, cache). | All tenant data at rest, including buyer PII, messages, encrypted credentials. | United States |
| Cloudflare | CDN, DNS, TLS termination for the app and marketing site; Workers (marketing site hosting); R2 (object storage for product images, attachments, labels). | Object storage (images, files, labels); request metadata. | Global edge network |
Sales channels (data flows both directions)
When you connect a sales channel, we exchange order, inventory, listing, and (where supported) message data with that channel.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Amazon Selling Partner API | Order ingestion, inventory and price sync, fulfilment updates, refunds. | Buyer names, shipping addresses, order items, prices, tracking, refunds. | United States |
| eBay (REST + Trading APIs) | Order sync, case & return management, listing CRUD, inventory updates, post-order messaging. | Buyer contact (often relayed), order details, listing data, case/dispute content. | United States |
| Shopify Admin API | Order import, inventory sync, fulfilment push, refunds, order notes/emails. | Buyer PII, addresses, order data, product catalog, inventory. | Canada / United States |
| WooCommerce REST API | Order ingestion, inventory push, fulfilment updates. | Buyer names, addresses, order data, product info. | Self-hosted by the customer’s WooCommerce installation |
| BigCommerce API | Order sync, listing management, inventory push, webhooks. | Buyer PII, order details, product catalog. | United States |
| Adobe Commerce / Magento API | Order import, listing CRUD, inventory sync, webhooks. | Buyer names, addresses, orders, products. | Varies by customer hosting |
| TikTok Shop API | Order sync, listing management, inventory updates. | Buyer PII, order data, product listings. | United States / China (ByteDance operations) |
Email, messaging & communications
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Postmark | Outbound transactional email; inbound email relay (channel buyer relay addresses). | Buyer/seller email addresses, subject and body of order-related emails. | United States |
| Google APIs (Gmail / Workspace) | OAuth + IMAP/SMTP for users who connect a Gmail or Workspace inbox. | Email contents (only mailboxes the customer explicitly connects), OAuth refresh tokens (encrypted). | United States |
| Microsoft Azure / Microsoft 365 | OAuth + IMAP/SMTP for users who connect an Outlook or Microsoft 365 inbox. | Email contents (only mailboxes the customer explicitly connects), OAuth refresh tokens (encrypted). | United States / European Union |
| Meta WhatsApp Cloud API | Customer-initiated WhatsApp messaging (where configured). | Buyer phone numbers, message content (text, images, documents). | United States |
| Customer-configured SMTP / IMAP | Where the customer configures their own mail server; we connect to it as a client. | Email contents; credentials (encrypted at rest). | Depends on the customer’s provider |
AI / machine learning
| Provider | Purpose | Data | Location |
|---|---|---|---|
| OpenRouter | Default LLM gateway. Routes AI requests (listing suggestions, sentiment classification, agent tool-calling, draft replies) to a downstream model provider. | Whatever content is sent in the prompt — may include product data, buyer messages, order context. | Routes globally including the United States, EU, and (depending on model) other jurisdictions including China. |
| Google Gemini | Used directly for some classifier tasks; available as a tenant-nominated provider. | Prompt content as above. | United States |
| Anthropic Claude | Available as a tenant-nominated AI provider. | Prompt content as above. | United States |
You can pick. Tenants can nominate a specific AI provider in their settings.
If your data-protection profile requires you to avoid certain jurisdictions, configure your
AI provider before enabling AI features, or disable them.
Optional & conditional
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Firebase Realtime Database | Optional relay for eBay platform notifications (only enabled if configured). | eBay webhook payloads (order events, case updates). | United States (Google Cloud) |
Local-only (no network egress)
| Component | Purpose | Notes |
|---|---|---|
| MaxMind GeoIP-Lite | Looks up country from a login IP address for security alerts. | Offline database bundled with the application; no data leaves our infrastructure. |
Contact
Questions about a specific sub-processor or a change request: privacy@unifiedorders.com.