Legal
Subprocessors
The companies that receive data so that we can run eComm Router.
Effective date and last updated: November 7, 2026.
1. Current subprocessors
These companies receive data so that we can run eComm Router. Each one acts for OnBreeze.
| Subprocessor | What it does | Data it receives | Where |
|---|---|---|---|
| Google Cloud (Google LLC) | Runs the private service (Cloud Run). Holds Walmart API keys (Secret Manager), files and the change ledger (Cloud Storage), and captured data (Cloud SQL, Cloud Storage). Keeps platform logs. | Walmart API keys. Walmart Marketplace data in transit. Files that reads deliver, and claim evidence. Captured data for accounts in the capture pilot. Logs with internal IDs and no request or response contents. | United States: us-central1, and the US multi-region for the capture archive. Secret Manager uses automatic replication: Google chooses the locations of the encrypted copies, and they can be outside the United States. |
| Cloudflare, Inc. | Runs the public service (Workers). Holds the main database (D1) and OAuth tokens (Workers KV). Provides DNS, network protection and the Turnstile security check. | All web and connector traffic. Account, team and connection records. Change records, audit log and usage records. Read evidence and stored report and listing-quality rows. OAuth tokens and grants. | The database runs in Western North America. The service runs near it. Traffic can enter the network at a location outside the United States when the sender is outside it. Workers KV copies data across Cloudflare’s global network. |
| Google (sign-in and email) | Google sign-in, Google Workspace directory import when you choose it, and the email hosting of our support inbox. | Sign-in identity: email and Google account identifier. Names and emails for a directory import. Contact form messages and support email. | United States and other locations where Google operates. |
| Postmark (ActiveCampaign, LLC) | Sends email: sign-in codes, team invitations, onboarding email, change, job and completion notices, and contact form messages to our support inbox. | Recipient email addresses and message contents. Notices can name a workspace, a SKU or a job. Contact form messages hold what the sender wrote. | United States. |
| PostHog, Inc. | Product analytics on PostHog US Cloud. | Page views, clicks and a sample of masked session replays. Product events with an internal account ID. No email address, IP address or location. | United States. |
2. Stripe
Stripe receives no customer data today, because live billing is off. Stripe will process payments when a paid plan starts. The Billing and Refund Policy describes that.
3. Not subprocessors
- Walmart. The Service calls Walmart’s APIs with your keys. Walmart Marketplace is your own relationship with Walmart.
- Your AI client. You choose it. Anthropic, OpenAI or another provider receives what the Service returns to that client, under its own terms.
4. Changes to this list
We give 30 days’ notice by email or in the Service before we add a subprocessor that processes Customer Data. If you object, you can stop using the Service and delete your account before the change takes effect. The Data Processing Addendum governs this list.