Sub-processors
These are the companies Kukis relies on to run the service. Each one may process personal data of a merchant's shoppers on our behalf, under a data processing agreement with us.
| Company | What it does for Kukis | Data it can see | Where |
|---|---|---|---|
| Shopify International Ltd. | The platform the app runs in: authentication, the admin, the storefront, webhooks and billing | Shop and customer data the merchant already holds in Shopify | Global, under Shopify's terms |
| Fly.io, Inc. | Runs the application and its background worker | Everything the app processes, while it is being processed | Frankfurt, Germany. Fly.io is a US company operating that region |
| Neon Inc. | The PostgreSQL database and its backups | All stored data: email addresses and hashes, consent records, saved carts and wishlists, delivery events | Frankfurt, Germany (aws-eu-central-1) |
| Resend (Plus Five Five, Inc.) | Sends the app's email and reports delivery events | Recipient address and the content of each email sent | United States |
| Sentry (Functional Software, Inc.) | Server-side error reports. Optional, and personal data is scrubbed before sending | Error messages and technical context, with addresses, tokens and keys removed | EU region |
Transfers outside the EU
The application and the database run in the EU. Email is sent through Resend, a US provider, so recipient addresses and email content are processed in the United States under the EU Standard Contractual Clauses. Fly.io is a US company, but the compute and storage used here are in its Frankfurt region.
Changes
We give notice before adding or replacing a sub-processor, so merchants have the chance to object. To be told about changes, email main@kukis.nl.
See also the privacy policy and the data processing agreement.