Purpleturret
How we handle data

Subprocessors

Effective May 14, 2026

Purpleturret engages the third parties listed below to process Buyer Personal Data on a Seller’s behalf, as authorized in our Data Processing Addendum. This page is the canonical, up-to-date list referenced in Annex III of the DPA.

  • Vercel Inc.
    PurposeApplication hosting and edge delivery; website analytics
    LocationUnited States
  • Convex, Inc.
    PurposeDatabase and backend services
    LocationUnited States
  • Resend, Inc.
    PurposeTransactional email delivery
    LocationUnited States
  • Google LLC
    PurposeCustomer support email (Google Workspace); website analytics (Google Analytics)
    LocationUnited States
  • PostHog, Inc.
    PurposeProduct analytics
    LocationUnited States
  • Functional Software, Inc. (Sentry)
    PurposeError monitoring and application performance
    LocationUnited States
  • Stripe, Inc.
    PurposePayment processing (operates as independent third-party payment processor under Stripe’s own terms; included here for transparency)
    LocationUnited States (with global payment infrastructure)

Updates and notifications

We notify Sellers at least thirty (30) days in advance of any addition or replacement of a Subprocessor, either by updating this page or by email to the address on file. Sellers may subscribe to update notifications by emailing support@purpleturret.com.

Objections

Sellers may object to a new Subprocessor on reasonable data-protection grounds by giving written notice to support@purpleturret.com within thirty (30) days of notification. See DPA § 5.4 for the full process.

Related

Read the full Data Processing Addendum · Privacy Policy · Terms of Service