Sub-processors
Last updated 6 November 2026
We use the following service providers (“sub-processors”) to deliver Heatwave. Each one is bound by a written data processing agreement with obligations at least as protective as our Data Processing Agreement.
We’ll announce any new sub-processor on this page, and to merchants by email or in the app, at least 30 days before it starts processing shopper data. Merchants can object during that period, as described in the DPA.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Fly.io, Inc. | Hosting the Heatwave app, the snapshot and analysis service, the app database (Postgres) and the analytics database (ClickHouse) | Store and staff account details, settings, recommendations, anonymous shopper behaviour | Frankfurt, Germany |
| Cloudflare, Inc. | Receiving tracker data, queues, file storage for recordings and page snapshots | Anonymous shopper behaviour, recordings, snapshots | Global edge network; storage in Europe |
| Anthropic, PBC | AI analysis for recommendations | Page screenshots, aggregated statistics, anonymous visit summaries. Not used for model training. | USA |
| Shopify Inc. | App platform, sign-in, billing, checkout events | Store and staff account details, anonymous checkout events | Canada / USA / EU |
Transfers outside the EU/EEA rely on the EU–US Data Privacy Framework where the provider is certified, or on the Standard Contractual Clauses.
Questions? Email support@wearepixelfox.com.