Subprocessors.
The third parties that process personal data on Loyalshy's behalf, what for, and where. This list is part of our Privacy policy.
Last updated 4 October 2026
- Vercel, Inc.
- Purpose
- Hosting of the web app, dashboard and API
- Data
- All data in transit; request logs
- Location
- EU (Frankfurt); edge network worldwide
- Neon, Inc.
- Purpose
- Database hosting
- Data
- Accounts, programs, customers and interactions
- Location
- EU (Frankfurt)
- Upstash, Inc.
- Purpose
- Rate limiting
- Data
- Hashed sign-in identifiers, kept for minutes
- Location
- EU (Frankfurt)
- Cloudflare, Inc.
- Purpose
- Image storage and DNS
- Data
- Logos and card images uploaded by businesses
- Location
- EU and worldwide
- Stripe Payments Europe, Ltd.
- Purpose
- Payments and invoicing
- Data
- Business billing details
- Location
- United States and EU
- Trigger.dev, Inc.
- Purpose
- Background jobs
- Data
- Pass and contact identifiers, email contents
- Location
- EU and United States
- Resend, Inc.
- Purpose
- Transactional email
- Data
- Email addresses and email contents
- Location
- United States and EU
- Functional Software, Inc. (Sentry)
- Purpose
- Error monitoring
- Data
- Technical error reports, which may include identifiers
- Location
- EU and United States
- Apple Inc.
- Purpose
- Apple Wallet passes and push updates
- Data
- Pass data, device push tokens
- Location
- Worldwide
- Google LLC
- Purpose
- Google Wallet, Google sign-in, Places
- Data
- Pass data; Google account identifiers for sign-in
- Location
- Worldwide
| Subprocessor | Purpose | Data | Location |
|---|---|---|---|
| Vercel, Inc. | Hosting of the web app, dashboard and API | All data in transit; request logs | EU (Frankfurt); edge network worldwide |
| Neon, Inc. | Database hosting | Accounts, programs, customers and interactions | EU (Frankfurt) |
| Upstash, Inc. | Rate limiting | Hashed sign-in identifiers, kept for minutes | EU (Frankfurt) |
| Cloudflare, Inc. | Image storage and DNS | Logos and card images uploaded by businesses | EU and worldwide |
| Stripe Payments Europe, Ltd. | Payments and invoicing | Business billing details | United States and EU |
| Trigger.dev, Inc. | Background jobs | Pass and contact identifiers, email contents | EU and United States |
| Resend, Inc. | Transactional email | Email addresses and email contents | United States and EU |
| Functional Software, Inc. (Sentry) | Error monitoring | Technical error reports, which may include identifiers | EU and United States |
| Apple Inc. | Apple Wallet passes and push updates | Pass data, device push tokens | Worldwide |
| Google LLC | Google Wallet, Google sign-in, Places | Pass data; Google account identifiers for sign-in | Worldwide |
Changes.
We update this page when a subprocessor is added or replaced. Customers on a paid plan can ask to be notified by email.
Agreements.
Questions about data processing, or need a data processing agreement? Write to hello@loyalshy.com.