Sub-processors
Last updated: August 6, 2026
A complete list of the third parties that process personal data on our behalf. It is part of the Data Processing Agreement, and we give 30 days' notice before it changes.
Current sub-processors
| Provider | What they do | Data involved | Location |
|---|---|---|---|
| Hostinger International Ltd. Legal terms | Cloud hosting, database, object storage and outbound email (SMTP) for the StorePilot platform. | All data processed by the platform, including session recordings, analytics events and account details. | European Union (Lithuania / Netherlands) None — data remains within the EEA. |
That is the entire list. Everything else the platform needs — the database, file storage for session recordings, the job scheduler, the geolocation database — runs on our own infrastructure, so no further party sees customer data.
What is deliberately absent
The following categories of vendor are common in this industry and we use none of them. They are listed because their absence is a commitment, not an oversight:
- Third-party analytics. No Google Analytics, no Segment, no product-analytics SDK, on the marketing site or in the dashboard.
- Advertising and remarketing networks. No pixels, no conversion tags, no audience sharing.
- CDNs for fonts or scripts. Fonts are served from our own origin precisely so that loading a page does not disclose a visitor's IP address to a third party.
- AI providers. The optional narrative summaries run against a model we host ourselves. If that ever changes, the provider appears in the table above with 30 days' notice first.
- Data brokers. We do not enrich, append or sell any data, in either direction.
Geolocation data
Countries are derived from IP addresses locally, using a public-domain (CC0) IP-to-country database that we download and query on our own servers. No IP address is ever sent to a geolocation service, so there is no sub-processor to list for it.
Notice of changes
Before adding or replacing a sub-processor we notify account administrators by email and update this page, at least 30 days in advance. Customers who object on reasonable data protection grounds may terminate under §5 of the Data Processing Agreement.
To be added to the notification list, or with any question about a provider here, email contact@store-pilot.net.