YourTracking uses the sub-processors below to provide the Service. Each is engaged under terms consistent with our Data Processing Agreement. We keep this list current and dated, and we email clients at least 14 days before we add or replace a sub-processor, so they can object.
| Sub-processor | Purpose | Data | Region |
|---|---|---|---|
| Google Cloud Platform | Hosting, managed database, secret storage, and the load balancer and TLS edge for the YourTracking platform. | All service data at rest (encrypted), delivery credentials (in Secret Manager). | EU (europe-west1) |
| Resend | Sending the emails we send you and your team. | Each recipient's email address and the email itself: store names, figures and, in the email that says a store is live, the order number of its first sale. | USA (emails sent from the EU, Ireland) |
| Stripe (for clients billed through it) | Billing and payments: your subscription, card and bills. | Your billing name, email address, postal address and VAT number; your card, typed on Stripe's own page (we never see the full card number, only its brand, last four digits and expiry date); the stores and order counts on each bill. | USA |
| Cloudflare (Turnstile) | The bot check on our sign-in, sign-up and password reset forms. | The IP address and browser details of the person filling in the form. | USA / worldwide network |
Platforms you connect
These are not our sub-processors. Data reaches them because you connect them, on your instruction, and they handle it under your own agreement with them.
| Platform | What it receives or provides | Data | Region |
|---|---|---|---|
| Google (Google Ads) | The conversions you configure, and your account's spend and results for your dashboard. When you export the product table, a new sheet in your own Google Drive. | Hashed customer identifiers (email, phone, name), postal code and country, click identifiers, order value and currency; for an export, the table's product figures. | USA / EU |
| Meta Platforms (Conversions API) | Your store's Meta events. | Hashed customer identifiers, Meta click and browser identifiers, IP address and browser, order value and currency. | USA / EU |
| Shopify | Your order and store data (through the app you install) and your shoppers' consent state. | Order, product, refund and customer records of your connected stores; consent signals. | USA / EU |
| Klaviyo (only when you connect it) | Read with the key you give us, to show your email results and to match sales. We never write to it. | Flow and form results; a visitor's profile when needed to match a sale. | USA / EU |
| Microsoft Advertising, Pinterest, TikTok or Snapchat (only when you connect one) | Your store's purchases, sent through its conversion API. For a Microsoft Advertising or Pinterest ad account you connect for reports, also its daily spend, clicks and reported conversions, for your dashboard. | Hashed customer identifiers, the platform's click and browser identifiers, IP address and browser, order value and currency, and the products in the order. | Set by the platform you connect |
| Slack, Discord or ntfy (only when you add one) | Your store alerts, sent to the channel you add on your Account page. | Store names, the alert and, in the alert that says a store is live, the order number of its first sale. | Set by the service you choose |
Onward transfers & your instruction
When you connect a platform (Google Ads, Meta, Shopify) you instruct us to send your data to that platform to deliver the conversions you configured; the platform then handles that data under its own terms. We never sell data and never use one customer's data for another. Questions: info@yourtracking.ai.