Subprocessors
Last updated 2026-10-27
These are the outside services that handle data for Pastefront, what each one does and what it receives. The privacy policy says what we collect and why. When this list changes, the date above changes.
Services Pastefront uses (14)
- Supabase
- Sign-in and the database.Receives: Everything stored in Pastefront: accounts, stores, products, orders and the buyer details on them.
- Sign-in, if you choose it.Receives: Your Google account's name and email address.
- Twilio
- The text messages for phone sign-in.Receives: Your phone number.
- Vercel
- Hosting for pastefront.com and every store, and the registrar for domains bought through Pastefront.Receives: Every page request, and the registrant details the owner gives for a domain.
- Stripe
- Billing for plans and credits, and Stripe Connect for each store's checkout and payouts.Receives: Owners' billing details, and buyers' payment details, which Pastefront itself never sees.
- Anthropic
- The AI models that write and edit stores.Receives: Your store's text, product listings and your instructions, not buyer details.
- OpenRouter
- Routes Saver chat edits and ad copy to lower-cost AI models, run by the AI providers it routes to.Receives: Your store's text, product listings and your instructions, not buyer details. Every request asks for zero data retention and no training.
- CJ Dropshipping
- Product data, freight quotes, orders and tracking.Receives: The buyer's name, address and phone for CJ orders.
- AliExpress
- Product data; store owners place AliExpress orders themselves.Receives: Product links and product data only.
- Printify
- Print-on-demand products.Receives: The owner's design file, and the buyer's name, address and phone for Printify orders.
- Resend
- Sends email.Receives: Sign-in emails, the emails stores send their buyers (order and shipping emails, and the email flows an owner turns on), and Pastefront's own updates emails.
- Cloudflare
- DNS for pastefront.com, and storage for product pictures.Receives: Product pictures.
- Expo
- Delivers push notifications to the Pastefront phone app, through Apple and Google.Receives: The phone's push token and the notification's text, such as a new order's total.
- PostHog
- Product analytics and session replay on pastefront.com and the dashboard, never on stores.Receives: The pages you visit, what you click, a replay of the page with everything typed into forms hidden, and your browser and approximate location; once you sign in, your account id, email and plan; and events such as signing up, building a store and changing plan. It isn't loaded if your browser sends a Global Privacy Control signal, or on pages whose address carries a sign-in or invite link.
Tools a store owner connects
Klaviyo, Zapier, Make, Meta, their own Printify or PostHog account and the other tools a store owner connects receive what the owner connected them for, under the owner's own agreement with that tool. They aren't Pastefront's subprocessors; the store's own privacy policy names the ones that apply to its buyers.
AI models
Anthropic and the models OpenRouter routes to never receive buyer details. How Pastefront uses AI says what they write and what they never do.
Questions
Write to hello@pastefront.com.