HYGO Shop Subprocessors
Every third-party service Hygoshop uses to process merchant data is listed below. We list the service, its role, the data it processes, the location, and a link to its DPA where applicable. This page is markdown-tracked in the same git repo as the marketing site, so changes are version-controlled and the diff between today and any past date is queryable.
Active subprocessors
| Service | Role | Location | Purpose | DPA |
|---|---|---|---|---|
| Cloudflare, Inc. | Edge compute, CDN, R2 object storage, D1 SQL, Queues, KV, Workers | United States (global edge) | Primary infrastructure host. Worker code runs at the edge; object storage in R2; control-plane data in D1; auth-introspect cache in KV; batch jobs in Queues. | link |
| Neon, Inc. | Postgres database (when using Neon backend tier) | United States, Europe (region-pinned per merchant) | Primary canonical database for merchants on Start / Connect / Augment tiers using the Neon backend. Migrate tier merchants are on dedicated infrastructure. | link |
| Stripe, Inc. | Payments + Stripe Connect (operator payouts) | United States | Payment processing. Stripe Connect for the operator marketplace — escrow + payouts to operators. | link |
| Stripe (Tax) | Sales tax calculation | United States | Calculation of sales tax / VAT on orders. Same DPA as Stripe. | link |
| Anthropic, PBC | LLM inference (Claude family) | United States | Studio's primary LLM provider. We pass merchant + campaign cost-attribution headers; we do NOT send PII or secrets in prompts. | link |
| OpenAI, OpC LLC | LLM inference (fallback) | United States | Studio's secondary LLM provider for redundancy + cost optimization on certain task classes. | link |
| Resend, Inc. | Transactional email delivery | United States | Operator invite emails, abandoned-cart recovery emails, reorder notifications, alerts. | link |
| Ayrshare, Inc. | Social media publishing aggregator | United States | Default SocialAdapter implementation. Publishes to Instagram, TikTok, Facebook, YouTube, LinkedIn, X, Pinterest, Reddit, Threads, Bluesky on behalf of merchants. Merchants who prefer direct integrations can switch to direct-Meta / direct-TikTok adapters once approvals land. | link |
| EasyPost, Inc. | Shipping label + tracking | United States | Generate shipping labels, fetch real-time rates, track shipments. Used when merchants on Connect+ tiers fulfill from Hygoshop. | link |
| Shopify Inc. | E-commerce platform integration (when merchant uses Shopify) | Canada, United States | Direct API integration with merchant's Shopify store. Merchant-controlled OAuth grant; revocable any time. | link |
| Amazon.com, Inc. | E-commerce platform integration (when merchant uses Amazon SP-API) | United States | Direct integration with merchant's Amazon Seller Central via SP-API. | link |
| Meta Platforms, Inc. | Social platform (Facebook + Instagram) | United States | Read engagement, publish posts to merchant-managed Pages + IG Business accounts. | link |
| TikTok Pte. Ltd. | Social platform (TikTok) | Singapore (data routed via TikTok's regional infrastructure) | Login Kit for identity binding; Content Posting API for video publishing. | link |
| Google LLC | Social + Merchant Center integrations (YouTube + Google Merchant) | United States | YouTube Data API for video uploads, Merchant Center for product feed. | link |
Internal personnel + sister-product dependencies
- Authentication: SuperTokens (managed by mify3, sister product, same parent: HYGO Inc.). mify3 handles SuperTokens session storage; Hygoshop forwards session cookies for verification via a service binding (no public network exposure).
Adding or removing a subprocessor
We notify Augment + Migrate tier customers via email at least 30 days before adding a new subprocessor that processes their data. Start + Connect tier customers can subscribe to subprocessor change notifications via /contact.
Last updated: 2026-05-07. Changes tracked in git.