Subprocessors
Last updated October 18, 2026
Effective date: 18 October 2026
This page lists the third-party providers (“Subprocessors”) that MoreBasket Private Limited (“morebasket”, “we”, “us”) uses to process personal data on behalf of our customers, and the providers we use for our own website and business. It forms Annex 3 of our Data Processing Addendum. Each Subprocessor is bound by a written agreement that requires it to protect personal data as the DPA requires.
1. Providers that process customer store data
These providers process personal data from Stores built with morebasket (such as the details of your shoppers and orders) as our Subprocessors.
| Provider | What it is used for | Personal data involved | Location |
|---|---|---|---|
| Railway (Railway Corporation), United States | Hosting and running the store platform, storefronts and back office | All store data | As shown in the first column |
| Neon (Neon, Inc.), United States | Storing store data (products, customers, orders and settings) | All store data | As shown in the first column |
| Amazon Web Services, Inc. (Amazon S3 and Amazon CloudFront), United States | Storing images and files that stores upload | Files and images you upload, which may include personal data you choose to add | As shown in the first column |
| Twilio SendGrid (Twilio Inc.), United States | Sending order and account emails on behalf of stores | Customer names and email addresses, order details | As shown in the first column |
| Google LLC (Gemini), Anthropic PBC (Claude) and OpenAI, L.L.C. (GPT models) and TypeSafe AI, Inc. (Jev decision engine), United States | Powering the AI store builder, Shopmate and the AI agents: processing the Input you provide and the store data you let them use, and returning Output | Prompts, product and store content, and, where a task involves them, order and customer details | As shown in the first column |
| Gelato (and, where offered, Printrove) | Fulfilling print-on-demand orders placed through the platform’s catalog, only when you sell print-on-demand products | Customer name, delivery address and contact details, order contents | Production partners in many countries, chosen by the delivery destination |
2. Providers that process our own website and business data
We use these to run our website and our business. They process personal data for which we are the controller, such as waiting-list and account data, and visitor analytics, described in our Privacy Policy and Cookie Policy.
| Provider | What it is used for | Personal data involved | Location |
|---|---|---|---|
| Vercel Inc. | Hosting and delivering our website, running its server functions, and cookieless visit and speed measurement (Vercel Web Analytics and Speed Insights) | IP address, request and device data, and the details you submit in forms on the website | United States and its global edge network |
| Upstash, Inc. | Storing waiting-list sign-ups (a Redis database) | Email address, language, sign-up page, campaign and referrer details, time of sign-up | United States |
| PostHog Inc. | Product analytics, session recordings, performance and error measurement. Used only after the visitor accepts analytics | Anonymous visitor identifier, IP address, device and browser data, page views, clicks, scrolling, and recordings in which form fields are masked | United States |
| Google LLC (Google Analytics 4) | Counting visits and measuring campaigns. Cookieless until the visitor accepts analytics | Cookie identifiers, IP address, device and browser data, pages viewed, approximate location | United States and other countries where Google operates |
| Stripe, Inc., United States | Billing customers for morebasket plans, taking payments and sending invoices | Billing name, address, tax details, and payment details held by the provider | As shown in the first column |
| Google LLC (Google Workspace), United States | Customer support, ticketing and communications | Name, email address and the content of support conversations | As shown in the first column |
3. Providers you choose to connect
These are not our Subprocessors. They are independent services that you connect to your own Store, using your own accounts, and your use of each is under your own agreement with that provider. We send them the data needed for the connection to work, on your instructions.
- Payments: Stripe, PayPal.
- Shipping: Shippo and the carriers you connect to it.
- Sales channels and marketplaces: Google (including product feeds), Meta, Etsy, TikTok, Pinterest.
- AI shopping assistants that follow the Agentic Commerce Protocol.
- Any other service you connect through our integrations or API.
4. Changes to this list
We will tell customers at least 30 days before we add or replace a Subprocessor that processes store data, by updating this page and by email or notice in the Services, as section 5 of the DPA describes. If you object on reasonable data-protection grounds, write to admin@morebasket.com within that period. This page lists the date of the last update at the top.
5. Questions
Contact admin@morebasket.com.