Subprocessors
Last updated: July 29, 2026 · Current with Privacy Policy version 2026-08
These are the third-party providers that process customer data on our behalf when you use Invoe. Each one is bound by a contract requiring it to protect that data and to use it only to provide its service to us.
We share only what each provider needs. Where a row is marked optional, the provider processes nothing unless you connect it yourself.
| Provider | What it does | What it can see | Where |
|---|---|---|---|
| Shopify | Store connection, catalog sync, product publishing, and App Store billing | Store domain, product catalog, inventory levels, locations, subscription and billing status | United States and Canada |
| Supabase | Database, authentication, and file storage — our primary data store | All account and business data, and uploaded purchase order and invoice files | United States (us-east-2, Ohio) |
| Vercel | Application hosting and content delivery | Data in transit while serving requests; request logs | United States |
| Anthropic | Automated parsing of purchase orders and invoices, and drafting of product descriptions | The document or product details you submit for parsing or drafting. Not used to train models. | United States |
| Stripe | Payment processing for direct web subscriptions | Billing contact and subscription records. Card details go to Stripe directly and never reach us. | United States |
| Intuit (QuickBooks)optional | Accounting sync — vendors and bills | Vendor records and bill data you choose to send to your own QuickBooks company file | United States |
| Resend | Transactional email — sign-in links, team invites, billing and security notices | Name and email address, and the contents of those messages | United States |
| Brevo | Contact records, and product or lifecycle email | Name, email address, phone number where provided, and email engagement | European Union |
| Upstash | Rate limiting, to keep the Service available and resist abuse | Request metadata and counters only — no account or business data | United States |
| Sentry | Error tracking and performance monitoring | Technical error reports, which may incidentally include an account identifier | United States |
Changes to this list
Before a new subprocessor starts processing your data, we'll update this page and give you at least 30 days' noticeby email. If you object on reasonable data-protection grounds, tell us and we'll work with you to find an alternative; if we can't, you may terminate the affected part of the Service without penalty.
Related
- Privacy Policy — what we collect, why, and how long we keep it
- Data Processing Addendum — the contract terms that govern our processing of your data
- Terms of Service
Questions, or want to be notified of changes directly? Email support@invoeretail.com.