Sub-processors

The companies that process personal data for MazaLabs, what for, where, and how the transfer is protected. Updated 2026-10-17.

Services a merchant connects to their own store (a delivery network, a spreadsheet, their own ad accounts) are the merchant’s choice and not listed here. Lines marked “with consent” only receive data when the shopper agreed to marketing cookies.

Amazon Web Services (AWS EMEA SARL)

Hosting, database, object storage and email delivery (Amazon SES) for the entire platform.
eu-central-1 (Frankfurt) · Within the EU/EEA

Stripe Payments Europe Ltd

Card payment processing for orders paid by card.
Ireland · Within the EU/EEA

Resend

Delivery of transactional email — order confirmations and withdrawal receipts.
EU region · EU Standard Contractual Clauses

Sentry (Functional Software, Inc.)

Application error monitoring. Events are scrubbed of identifiers before they leave the server — see lib/sentry-scrub.ts.
United States · EU Standard Contractual Clauses

Meta Platforms Ireland Ltd · with consent

Advertising measurement through the Conversions API, and order notifications sent over WhatsApp Business.
Ireland, with onward transfer to the United States · EU Standard Contractual Clauses

TikTok Information Technologies UK Ltd · with consent

Advertising measurement through the TikTok pixel.
United Kingdom and European Union · EU adequacy decision

Google Ireland Ltd · with consent

Analytics and advertising measurement.
Ireland, with onward transfer to the United States · EU adequacy decision

Snap Group Ltd · with consent

Advertising measurement through the Snapchat pixel.
United Kingdom and United States · EU Standard Contractual Clauses

Web Push services and Expo

Delivering order notifications to a merchant’s own devices.
Varies with the merchant’s browser or device vendor · EU Standard Contractual Clauses

Google Cloud EMEA Ltd

AI models that write pages and read product photos (Gemini), and address suggestions at checkout (Maps Places), where the store turns them on.
Ireland, with onward transfer to the United States · EU adequacy decision

PayPal (Europe) S.à r.l. et Cie, S.C.A.

Payment processing for orders paid with PayPal.
Luxembourg · Within the EU/EEA

OpenRouter, Inc.

Routes the AI assistants’ requests (store chat replies, writing, translations) to the model that answers them.
United States · EU Standard Contractual Clauses

X.AI LLC

AI model for the assistants: store chat replies, page writing and translations.
United States · EU Standard Contractual Clauses

Groq, Inc.

AI model used for some assistant replies when it is the configured provider.
United States · EU Standard Contractual Clauses

ElevenLabs Inc.

Voice for the voice assistant, when a merchant turns it on.
United States · EU Standard Contractual Clauses

Popout, Inc. (Shippo)

Shipping labels and carrier rates: the delivery address and parcel details of an order the merchant ships.
United States · EU Standard Contractual Clauses

17TRACK

Parcel tracking: the tracking number and carrier of an order.
China · EU Standard Contractual Clauses

Cloudflare, Inc.

HTTPS certificates and routing for merchants’ custom domains, where used.
Global network, United States · EU Standard Contractual Clauses

Data processing agreement

Merchants in the EU and UK can sign our data processing agreement. Write to support@mazalabs.com with “DPA” in the subject and we send it for signature. We tell merchants before adding a sub-processor.