Subprocessors
Last updated: May 2026
CouponMesh engages the following third parties (subprocessors) to provide infrastructure and services required to operate the platform. We have data processing terms in place with each subprocessor that meet GDPR Article 28 standards.
Current subprocessors
| Subprocessor | Purpose | Region |
|---|---|---|
| Cloudflare, Inc. | CDN, DNS, DDoS protection, R2 object storage (creator avatars, logos, cover images), webhook ingress (Tunnel) | Global (US-headquartered) |
| Resend (Resend, Inc.) | Transactional email delivery (account verification, password reset, application notifications) | United States |
| Shopify, Inc. | OAuth provider for merchant authentication, source of order webhooks, discount-code creation API. Shopify is also our integration partner, not a subprocessor in the traditional sense — order data flows from Shopify to us, not the other way around. | Canada |
| Production hosting provider | Managed application hosting and PostgreSQL database for the CouponMesh platform. | United States |
The production hosting provider will be finalized prior to general availability. This page will be updated with the specific provider name at least 30 days before any merchant data is processed there.
How we choose subprocessors
Before engaging a new subprocessor we evaluate:
- Their published security practices and any third-party audits (SOC 2, ISO 27001, etc.)
- Their data residency and data transfer mechanisms (Standard Contractual Clauses, adequacy decisions)
- Their GDPR Article 28 contract terms
- Their incident notification commitments
- Their position in the EU-U.S. Data Privacy Framework where applicable
Notification of new subprocessors
We will notify connected merchants at least 30 days before adding a new subprocessor that processes merchant or end-customer personal data. Notification is sent to the email address on the merchant's CouponMesh account.
A merchant who objects to a new subprocessor may terminate their use of CouponMesh under the terms of the Data Processing Agreement. We will work with the merchant in good faith to address the concern before that becomes necessary.
Questions
For questions about our subprocessors or to object to a planned change, contact privacy@couponmesh.com.
See also our Privacy Policy and Data Processing Agreement.
Questions about this page? Contact support.