Sub-processors.
To run Retrics we rely on a small set of trusted infrastructure providers. Here is every third party that processes data on our behalf, what each one does, and where it operates.
| Provider | Purpose | Region |
|---|---|---|
| Shopify | Source of store data (orders, customers, products) over the Shopify Admin API, OAuth authentication, and subscription billing. Governed by Shopify's Protected Customer Data requirements. | Canada / United States |
| Vercel | Application hosting and content delivery for the Retrics web app and API. | United States |
| Supabase | Managed PostgreSQL database and authentication. Stores your workspace configuration and the analytics we compute from your store's history; customer email addresses are hashed at rest. | United States |
| Resend | Delivery of transactional and authentication email (sign-in links, account notices) and the retention digests you choose to receive. | United States |
What a sub-processor is
A sub-processor is a third party that processes personal data on our behalf to help us run Retrics. We use only the providers listed above, each under a data-processing agreement that binds them to confidentiality and security obligations at least as protective as our own.
We do not sell your data or your customers' data, and we do not share it with advertising networks, data brokers, or any party outside this list.
How we limit what they see
Store data is read from Shopify read-only — we never read payment credentials — and customer email addresses are hashed before analytics run. Each provider receives only the data needed for its function, and production access is restricted and audited.
When you disconnect your store or delete your workspace, we remove your store's data from these systems within 30 days and honor Shopify's mandatory customer-redaction and shop-erasure webhooks.
Changes to this list
We will update this page before a new sub-processor begins processing your data, and we will announce material changes in-product or by email so you have time to review them. This page always reflects our current providers.
Contact
Questions about our sub-processors, or to request our data-processing agreement: hello@retrics.ai., governed by the laws of the State of Delaware, USA.