GrowMoe, LLC uses the vendors below to operate GrowMoe. Where we process a merchant’s customer data as a processor, these are our sub-processorsunder the Data Processing Addendum. Where we act as controller for merchant account data, they are simply our service providers. See theprivacy policy for which role applies to which data.
This is the complete list as of the date above — every vendor that can touch data from the app, plus the analytics tools on this website.
| Sub-processor | What it does | Data it touches | Where it applies |
|---|---|---|---|
| Cloudflare | Hosting and application delivery, Workers compute, D1 database, R2 object storage, Queues for event ingest. Also Cloudflare Web Analytics on this website — cookieless traffic measurement enabled at the network level, outside the cookie banner (see thecookie policy). | All data the app stores or moves — merchant account data and the merchant’s customer data, including personal data. Encrypted at rest. Web Analytics receives no browser storage and discards the visitor IP at the edge. | App |
| Resend | Transactional email delivery (account, notification, and app-generated email). | Recipient email address and name, plus the content of the message being sent. | App |
| Sentry | Error monitoring and crash reports, so we can find and fix defects. | Error and stack information. The context we attach is non-personal only: request method, route, response status, and internal organization and role identifiers. | App |
| PostHog | Product analytics — how the app and this website are used, so we can see what works. | Pseudonymous events: a hashed identifier, the event name, and non-personal properties. No raw names, emails, or addresses. On growmoe.com it only runs after the visitor accepts the cookie banner. | App and website |
| Google Analytics 4 | Website analytics for growmoe.com only. | Website visitor data (IP-derived approximate location, device, pages viewed) — only after the visitor accepts the cookie banner. | Website only |
Data location
We are deliberately not listing a processing region for these vendors, because we cannot state one with certainty for every service they run. Our infrastructure provider operates a global network, and the other vendors run in more than one country — so personal data may be processed outside your own country, including in the United States.
We make no data-residency guarantee today. Product analytics and error monitoring currently run in the vendors’ US-hosted projects for every organization. If residency is a requirement for you, ask us before you rely on it.
Not sub-processors
Shopify is not our sub-processor. It is the merchant’s own platform and the source of the customer data the app mirrors; the merchant’s relationship with Shopify is separate from ours. Shopify stays the system of record for the data it owns.
Website analytics load only after you accept
Two analytics tools run on growmoe.com: PostHog andGoogle Analytics 4. Both sit behind the same cookie banner — neither script is loaded and no analytics cookie or identifier is written until a visitor choosesAccept. Declining is remembered, and a Global Privacy Control or Do Not Track signal suppresses both outright, without the banner ever being shown. Google Analytics additionally runs with advertising storage and personalization denied, and itnever runs inside the app — only PostHog does, and there it is the product analytics described in the table above. Details are in ourcookie policy.
Erasure reaches our sub-processors
When a customer redaction request comes in, we scrub that person across the records we own and the Shopify records we mirror, and we also delete the corresponding pseudonymous person in our product-analytics sink. Error-monitoring context carries no personal data and is short-retention, so there is no per-person deletion pipeline there. Uninstalling the app scrubs PII-classified fields promptly, and the store’s full data is deleted after a 30-day grace period.
Changes to this list
When we add, replace, or drop a sub-processor, we update this page and change theLast updated date. If yourData Processing Addendum gives you a right to advance notice of a new sub-processor, or a right to object, that addendum governs and takes precedence over this page.
Questions
Write to [email protected] — including if you need a vendor’s DPA, a security contact, or a residency answer for a specific service.