Subprocessors
Last updated November 5, 2026
These are the third parties that help us run Trfyx. Each one is bound by a written agreement to protect the data and use it only to provide its service to us. This page is Annex III of our data processing agreement.
Subprocessors of Customer Data
These providers process the analytics data collected on our customers' websites. We run our analytics database, session-recording pipeline, location lookup and screenshot browser ourselves on this infrastructure. No analytics data is sent to any AI or advertising provider.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Amazon Web Services, Inc. | Cloud hosting: application servers, databases, file storage for session recordings and heatmap screenshots, and backups | All Customer Data | United States (us-east-1) |
| Resend, Inc. | Delivery of reports, alerts and other emails the Service sends | Recipient email addresses and the analytics summaries included in reports and alerts | United States |
Service providers for account and billing data
These providers process data about our customers' accounts, not the analytics data collected on their websites.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Dodo Payments | Payment processing, invoicing and tax collection as merchant of record | Billing name, email, address, payment details and subscription records | Global |
| Resend, Inc. | Account emails, such as verification, password reset, invitations and billing notices | Name and email address | United States |
| Cloudflare, Inc. | DNS, and Turnstile bot protection on sign-up and sign-in pages | IP address and browser signals on the protected pages | Global |
| Google LLC | Optional sign-in with Google | Name, email address and profile picture, if you choose this sign-in method | United States |
| GitHub, Inc. | Optional sign-in with GitHub | Name, email address and profile picture, if you choose this sign-in method | United States |
| AppSumo | Lifetime-deal licence purchases and redemption | Licence details and the email address used for the purchase | United States |
Integrations you connect
When you connect a service such as Stripe, Lemon Squeezy or Shopify, we exchange data with it on your instructions. Those services aren't our subprocessors: you choose them, and your agreement with them applies. Social mentions are collected from the public X and Reddit APIs.
Changes
We'll email customers at least 14 days before we add or replace a subprocessor of Customer Data, and update this page. Objections can be raised as described in section 5 of the DPA. Questions: [email protected].