Sub-Processors
Last updated 15 October 2026
Seilfi is operated by Hygge Tygge Ventures Limited. To provide the app we use a small number of service providers, called sub-processors, who handle merchant data on our instructions. This page lists them, what they do and where they process data. It forms Schedule 3 of our Data Processing Addendum. Each provider's contract with us includes the EU Standard Contractual Clauses, the UK International Data Transfer Addendum and the Swiss modifications, so it covers merchants in the EEA, the United Kingdom and Switzerland.
Current sub-processors
| Sub-processor | What it does | Where data is processed | Safeguards for transfers |
|---|---|---|---|
| Vercel Inc. (United States) | Hosts and runs the app, including scheduled jobs and technical logs | The app runs in Vercel's Dublin, Ireland region. Requests pass through Vercel's global network. Technical logs are kept for one day. Backups may be replicated outside the EEA. | EU Standard Contractual Clauses in Vercel's Data Processing Addendum; EU-US Data Privacy Framework certification |
| Neon Inc. (United States) | Provides the Postgres database in which Seilfi stores the merchant's catalogue, locations, stock ledger and account records | Database in Amazon Web Services' Frankfurt, Germany region (eu-central-1), provisioned through Vercel. Support and operations may be carried out from the United States. | EU Standard Contractual Clauses in Neon's Data Processing Addendum |
| Plus Five Five, Inc., trading as Resend (United States) | Sends the report and alert emails that merchants ask for | Message content, recipient addresses and delivery logs are stored in the United States for 30 days, plus 7 days of backup, whichever region emails are sent from. | EU Standard Contractual Clauses in Resend's Data Processing Addendum; EU-US Data Privacy Framework certification |
Payments
Payments are taken through Stripe Payments Europe, Limited, an Irish company, which may transfer data to Stripe, Inc. in the United States under its Data Processing Agreement and the EU Standard Contractual Clauses.
Stripe is not a sub-processor of Seilfi. Seilfi uses Stripe's hosted payment page, so card details pass directly from the payer to Stripe and never reach Seilfi. Stripe acts as a separate controller of the payment data it collects, under Stripe's own privacy policy. We receive only the subscription's status, plan and billing period, and the billing name and address needed to issue an invoice.
What is not on this list
Shopify is not a sub-processor of Seilfi. Where a merchant connects a Shopify store, Shopify is that merchant's own platform, and for merchants who subscribed through the Shopify App Store it is also their billing agent. In both cases Shopify handles store data and payments under the merchant's own agreements with Shopify. Merchants who use Seilfi without Shopify have no relationship with Shopify through us.
Each sub-processor above uses its own service providers. Their lists are published by each sub-processor: Vercel at security.vercel.com, Neon at neon.com/trust, and Resend at resend.com/legal/subprocessors. Our contracts require each sub-processor to bind those providers to equivalent obligations and to remain responsible for them.
Changes to this list
We will update this page at least 10 days before we add or replace a sub-processor. Merchants can subscribe to be told of changes by emailing hello@seilfi.com with the subject line "Sub-processor updates". A merchant that has a reasonable data protection objection to a new sub-processor may tell us within the notice period, as described in clause 7 of our Data Processing Addendum.