Sub-Processors
SUB-PROCESSORS
Last Updated: August 18, 2026
Giften, LLC ("Giften") engages the following third-party service providers ("Sub-Processors") to help operate, secure, support, and improve our Services. We maintain a written data protection agreement (DPA) or equivalent contractual safeguard with each Sub-Processor, and we require them to handle personal information consistent with our Privacy Policy and applicable data protection law.
This list is reviewed and updated as our vendor stack changes. For questions, contact hello@giftenmarket.com.
Current Sub-Processors
| Sub-Processor | Purpose | Categories of Data Processed | Processing Location | Provider's Privacy / DPA |
|---|---|---|---|---|
| Shopify, Inc. | E-commerce platform, hosting, infrastructure, payment processing (Shopify Payments) | Identifiers, customer records, commercial information, internet activity, payment information | Canada / United States | Privacy / DPA |
| Klaviyo, Inc. | Email and SMS marketing, delivery, and analytics | Identifiers, commercial information, internet activity, inferences | United States | Privacy / DPA |
| HighLevel, Inc. (GHL) | CRM, lead capture forms, and marketing automation (email + SMS) for B2B and wholesale channels | Identifiers, professional information, commercial information, communications content | United States | Privacy / DPA |
| Finale Inventory, LLC | Warehouse management and order fulfillment | Identifiers, customer records (shipping name, address, phone) | United States | Privacy |
| FedEx + other shipping carriers | Order delivery | Identifiers, customer records (shipping name, address, phone) | United States | FedEx Privacy |
| Google LLC (Google Ads, Google Analytics, Google Merchant Center, Tag Manager) | Advertising, conversion measurement, web analytics, tag management | Identifiers (including hashed), internet activity, geolocation, inferences | United States | Privacy / Ads DPA |
| Meta Platforms, Inc. (Facebook Ads, Instagram Ads, Meta Pixel) | Advertising and conversion measurement | Identifiers (including hashed), internet activity, inferences | United States | Privacy / Business Tools Terms |
| Microsoft Corporation (Microsoft Clarity, Microsoft Advertising) | Session-replay and behavioral analytics; advertising and conversion measurement | Internet activity, device data, identifiers | United States | Privacy / Clarity Terms / Advertising Agreement |
| Triple Whale, Inc. | Marketing attribution and cross-channel analytics | Identifiers, commercial information, internet activity, inferences | United States | Privacy / DPA |
| Anthropic, PBC | AI model provider powering our AI-assisted customer support assistant | Communications content (customer support messages), identifiers referenced within those messages | United States | Privacy / DPA |
| Supabase, Inc. | Database and storage for our AI support assistant (conversation history, knowledge base) | Identifiers, communications content (chat transcripts), commercial information | United States | Privacy / DPA |
| n8n GmbH | Workflow automation between our systems (order, support, and marketing operations) | Varies by workflow — identifiers, customer records, commercial information, and communications content passing through configured automations | European Union / United States | Privacy / DPA |
| Judge.me | Product reviews collection and display | Identifiers (reviewer name and email), commercial information (review content, ratings, photos) | Hong Kong / Global | Privacy / DPA |
| Yuzu | Greeting card personalization and on-demand printing | Identifiers (sender and recipient names, shipping addresses), communications content (custom card messages) | United States | Contact provider for DPA |
| Fast Simon, Inc. | Site search, autocomplete, and merchandising | Internet activity (search queries, products viewed), device data | United States | Privacy |
| Avada (Mageplaza) | SEO and site performance tooling | Internet activity, device data | Vietnam / United States | Contact provider for DPA |
| Amazon.com, Inc. | Sales channel (Amazon Marketplace) | Identifiers, customer records, commercial information for orders placed through Amazon | United States | Privacy |
| Faire Wholesale, Inc. | Wholesale sales channel | Identifiers, professional information, commercial information for orders placed through Faire | United States | Privacy |
| Nordstrom, Inc. / Mirakl | Marketplace sales channel and marketplace operating platform | Identifiers, customer records, commercial information for orders placed through Nordstrom Marketplace | United States / France | Nordstrom Privacy / Mirakl Privacy |
Additional Shopify processing
Our Shopify plan has Shopify Network Intelligence enabled. Under this feature, customer data from our store is used together with other Shopify data to improve products, ad targeting, and personalization for our store, as described in Shopify's Additional Services Terms. No other merchant can access our data.
Pending Retirement
The following technology is being removed from our Services and is no longer used for any active business purpose. Until removal is complete, it may still set identifiers on your device:
| Technology | Status |
|---|---|
| Pinterest (conversion tracking) | Under review |
Updates to This List
We may add, remove, or change Sub-Processors as our vendor stack evolves. Material changes will be reflected on this page. We encourage you to review this page periodically.
To request notification of material Sub-Processor changes in advance (where applicable), or to ask questions about our use of Sub-Processors, contact hello@giftenmarket.com.