To provide the Services, Shopxare, LLC uses the third parties below ("sub-processors"). They process Customer Personal Data only to perform their service for us, under written data protection terms. This list forms Annex III of our Data Processing Addendum.

Infrastructure

Sub-processor	Purpose	Data processed	Location
Veriup Bulut İnternet Hizmetleri A.Ş.	Data center and servers where the Services and all Customer Data are stored	All Customer Data	Türkiye
Cloudflare, Inc.	DNS, content delivery, TLS termination, protection against attacks	Traffic data (IP addresses, request data) passing through its network	Global network; company in the United States

Payments

Sub-processor	Purpose	Data processed	Location
Stripe, Inc. and its affiliates	Card payments, invoices and tax calculation for paid plans	Billing contact, billing address, payment details	United States, Ireland

Stripe processes account and billing data, not conversations with your customers.

AI (only when AI features are on)

Sub-processor	Purpose	Data processed	Location
Google LLC (Gemini API)	Are AI answers, Copilot, live translation, mood detection and knowledge-gap suggestions when the Workspace uses Shopxare's platform AI key	The conversation parts and knowledge content needed for each request	United States and other Google locations

If you add your own API key for OpenAI, Anthropic or Google in Are AI → Settings, that provider works under your own agreement with it and is not our sub-processor.

Mobile apps (only for teammates who use them)

Sub-processor	Purpose	Data processed	Location
650 Industries, Inc. (Expo)	Delivering push notifications to the Shopxare mobile app	Push token, notification title and a short preview	United States
Apple Inc. (APNs) and Google LLC (Firebase Cloud Messaging)	Delivering notifications to iOS and Android devices	Push token and notification content	United States and other locations

Teammates can turn off message previews in notifications in the app's settings.

Not sub-processors

Email from Shopxare (notifications, replies to your customers, transcripts) is sent by our own mail server, not by a third-party email service.
Fonts and scripts on shopxare.com, the app and the Messenger are served from our own servers.
Visitor analytics are measured by our own systems; no third-party analytics service is used.
Services you connect yourself (Telegram, WooCommerce, Shopify, webhooks, data connectors, your own AI keys) act under your instructions and your agreements with them.

Changes

We give at least 30 days' notice before a new sub-processor starts processing Customer Personal Data, by updating this page and, for customers who signed our DPA, by email. To be notified, use the DPA request form and tick "notify me of sub-processor changes", or write to [email protected].