Last updated: October 2, 2025
HiTide uses the following sub-processors to provide our services. All sub-processors are bound by data protection agreements that meet GDPR requirements. For more information about our data processing practices, please see our Privacy Policy and Data Processing Addendum.
Infrastructure & Hosting
| Provider | Service | Data Processed | Location | DPA Link |
|---|---|---|---|---|
| Google Cloud Platform | Database, backend hosting | Customer data, end-user data | US (us-central1) | Google DPA |
| Firebase (part of Google Cloud) | Database services | Customer data | US (us-central1) | Firebase DPA |
| Vercel | Website and admin tools hosting | Account data, analytics | US (us-east-2 - cle1) | Vercel DPA |
| Upstash | Caching services | Temporary data cache | US (us-central1) | Upstash DPA |
| OpenAI | AI services | AI-powered personalization & exception analysis services | US | OpenAI DPA |
| IPData | Country detection | Prefill the country code in the phone number field, client side. No data is stored on our servers. | US | IPData Privacy Policy |
| Stripe | Payment processing | Customer payment data | US | Stripe DPA |
| Shopify | Payment processing | Customer payment data | US/CA | Shopify DPA |
| Sendgrid (part of Twilio) | Transactional email services | Email addresses and body of the emails sent | US | Twilio DPA |
| Notion | CRM platform | Own customer data | US | Notion DPA |
| Google Workspace | Gmail, Drive, etc. | Emails, documents, etc. | US | Google Workspace DPA |
Independent Processor Partners
The following platforms act as independent processors alongside HiTide for the same customer. Both HiTide and these platforms process data on behalf of the brand (customer) under separate data processing agreements. Data sharing between HiTide and these platforms (such as user contact information, opt-in consent dates or campaign participation data) occurs only at the direction of our mutual customers.
| Provider | Service | Data Processed | Location | DPA Link |
|---|---|---|---|---|
| Attentive | Email / SMS platform integration | User contact information, opt-in consent dates, and campaign participation data | US | Privacy Policy |
| BigCo (DBA Sotto) | SMS platform integration | User contact information, opt-in consent dates, and campaign participation data | US | Privacy Policy |
| Klaviyo | Email / SMS platform integration | User contact information, opt-in consent dates, and campaign participation data | US | Klaviyo DPA |
| Postscript | SMS platform integration | User contact information, opt-in consent dates, and campaign participation data | US | Privacy Policy |
| Sendlane | Email / SMS platform integration | User contact information, opt-in consent dates, and campaign participation data | US | Sendlane DPA |
| Yotpo | SMS platform integration | User contact information, opt-in consent dates, and campaign participation data | US/IL | Yotpo DPA |
| Shopify | E-commerce platform integration | User order data | US/CA | Shopify DPA |
Sub-processor Changes
We will notify customers of any material changes to our sub-processors at least 30 days in advance via email and by updating this page. If you object to a new sub-processor, please contact us at privacy@gohitide.com.