Sub-processors
Last Updated: August 13, 2026
Buy Box Checker uses the third-party providers below to deliver the Service. This page is referenced by Section 14 of our Terms of Service and supplements our Privacy Policy.
We update this list when we add or remove a provider. If you would like advance notice of changes, or to discuss data processing terms, contact us at help@buyboxchecker.com.
Separately from the providers below, some pages load content directly from third parties, which means those parties see your IP address and request metadata: Amazon's image CDN for product images, jsDelivr for map data on our public Buy Box check, and YouTube where a video is embedded.
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase | Database and user authentication | Account data, monitoring configuration, monitoring history | United States |
| Vercel | Application hosting and content delivery | Request metadata, IP addresses | United States |
| Stripe | Payment processing and subscription billing | Billing name, email, address, transaction history. Card details go directly to Stripe and never reach our servers. | United States |
| Amazon data collection provider | Collection of public Amazon product page data | The ASINs and locations you monitor. No customer personal data. | European Union |
| Resend | Transactional and daily digest email delivery | Email address, message content | United States |
| Inngest | Background job orchestration for checks and digests | Job payloads referencing account and ASIN identifiers | United States |
| PostHog | Product analytics, and session replay inside the signed-in dashboard | Usage events, name and email address for identified users, device and browser metadata, and recorded dashboard sessions | United States |
| Google (Analytics and Tag Manager) | Website traffic analytics | Pseudonymous usage events, device and browser metadata | United States |
| Google (Gemini API) | AI-generated summaries of your account data | Your monitoring data at the time of generation: your seller name, the ASINs you track, per-location Buy Box status including city or postcode, and competing seller names and prices | United States |
| Cloudflare | DNS and bot protection on public forms (Turnstile) | IP address, request metadata | United States |
| Chatwoot (self-hosted by us) | Customer support chat and email. The chat widget loads on all pages. | Name, email address, conversation content | United States (Oregon) |
| Hetzner | Server hosting for the self-hosted Chatwoot instance above | Whatever Chatwoot stores, at rest on their infrastructure | United States (Oregon) |
| FirstPromoter | Referral and affiliate attribution | Referral codes, conversion events, and for enrolled affiliates, name, email address and account identifier | European Union |