Syncwright uses the third parties below to help deliver the service. Each is a subprocessor under our Data Processing Addendum. We keep this list current so merchants always know who is involved in processing their data.
Current subprocessors
| Subprocessor | Purpose | Data processed | Location / notes |
|---|---|---|---|
| Cloudflare | Application hosting and storage: Workers (compute engine), D1 (database), R2 (object storage), Queues (job processing). | Sync metadata and connection credentials at rest; customer personal data passes through Workers in flight only. | United States, with global edge processing. |
| Shopify | Source platform. The merchant’s Shopify store is one side of the sync and the origin of order and customer records. | Product, inventory, order, and customer data belonging to the merchant. | United States / global (per Shopify). |
| Lightspeed | Source platform. The merchant’s Lightspeed Retail R-Series account is the other side of the sync. | Product, inventory, sale, and customer data belonging to the merchant. | United States / global (per Lightspeed). |
| Resend | Transactional email: sync alerts and account notifications sent to the merchant. | Merchant recipient email and notification content. No customer personal data. | United States. |
| SerpAPI | Optional image enrichment: image search to source a product image when one is missing. | Product identifiers and search terms. Product images only, never customer personal data. | United States. |
| Claid | Optional image enrichment: image processing (background cleanup, cropping, upscaling). | Product images only, never customer personal data. | United States / global. |
Image enrichment note
Image enrichment is an optional feature. When it is enabled, SerpAPI and Claid process product images only. They never receive customer personal information such as names, emails, phone numbers, or addresses. If you do not use image enrichment, these subprocessors are not involved in your account at all.
Changes and notice
We may add or replace a subprocessor as the service evolves. When we do, we will update this page with the change and the effective date, and notify merchants where appropriate. If you have a data protection concern about a new subprocessor, contact us at jonathan@outsideprojects.com and we will work with you in good faith, as set out in our Data Processing Addendum.