Trust

Sub-processors

Wivly relies on a short, deliberate list of infrastructure providers to run loyalty programs. Data is stored in the EU. This list is kept current; last updated 31 July 2026.

ProviderPurposeRegion
SupabaseDatabase & merchant authenticationEU (Ireland, eu-west-1)
VercelApplication hosting & serverless functionsEU (Dublin, dub1); US company
AppleApple Wallet passes & push notificationsUS (EU-US DPF)
GoogleGoogle Wallet passesUS (EU-US DPF)
ResendTransactional email: merchant sign-in and account notices, plus card recovery and prepaid card records for customers who gave an address. Never marketing to customers.US (SCCs)
StripeMerchant subscription billingUS (EU-US DPF)
Vercel Web AnalyticsAggregate page-view counts for our own marketing site (cookieless, no cross-site profiling)EU (Dublin, dub1); US company

Questions about this list? Email privacy@wivly.me. See also the Data Processing Agreement and the privacy notice.

Changes to this list

We announce a new sub-processor here at least 30 days before it starts processing, so merchants have time to object. Removals are logged too.

AnnouncedEffectiveChange
2026-08-012026-09-01Added: Vercel Web AnalyticsAggregate page-view counts for our own marketing pages, so we can tell which pages help merchants find us. Cookieless, no cross-site identifiers, and no customer data is involved.

Turn regulars into a habit.

Live in under an hour. Free to start, no card required.

Sub-processors · Wivly