Trendful Subprocessors
Trendful engages the third parties below to help provide the Services. Each is bound by a contract requiring protections for Personal Data comparable to those in the Trendful Data Processing Addendum.
We give at least thirty (30) days' notice before a new subprocessor begins processing Personal Data, as described in Section 8 of the Data Processing Addendum.
Trendful is based in the United States. Where Personal Data originates in the European Economic Area, the United Kingdom, or Switzerland, transfers to each subprocessor rely on one of two safeguards, shown in the table below: certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions, or the Standard Contractual Clauses in that vendor's own data processing agreement. Our own transfers rely on the Standard Contractual Clauses, as set out in Section 9 of the Data Processing Addendum.
Certifications are renewed annually. The entries below were verified in August 2026; the current position for any participant can be checked at dataprivacyframework.gov.
Infrastructure and hosting
| Subprocessor | Purpose and Personal Data processed | Transfer mechanism |
|---|---|---|
| Google Cloud Platform / Firebase (Google LLC) | Primary infrastructure. Firestore stores merchant, seller, item, offer, shipment, and payout records; Firebase Authentication stores account credentials and identifiers; Cloud Storage holds uploaded item photos and documents; Cloud Functions runs the API and scheduled jobs; Cloud Logging retains operational logs. | EU-U.S. DPF, with the UK and Swiss extensions |
| Vercel Inc. | Hosting for the merchant admin and web front ends, and the managed Postgres database backing the marketing site's contact form. Processes request metadata and any data submitted through those surfaces. | EU-U.S. DPF, with the UK and Swiss extensions |
Payments and payouts
| Subprocessor | Purpose and Personal Data processed | Transfer mechanism |
|---|---|---|
| Stripe, LLC | Merchant subscription billing and payment processing. Processes merchant billing contact and payment method data. | EU-U.S. DPF, with the UK and Swiss extensions |
| Plaid | Bank account verification and linking for seller payouts (ACH, United States). Processes seller name and bank account details. | Standard Contractual Clauses under the vendor’s DPA |
| PayPal (including Venmo) | Seller payouts where the merchant selects those methods. Processes payout recipient identifiers such as PayPal email or Venmo username. | Standard Contractual Clauses under the vendor’s DPA |
Logistics
| Subprocessor | Purpose and Personal Data processed | Transfer mechanism |
|---|---|---|
| Simpler Postage, Inc. (dba EasyPost) | Shipping label generation, carrier selection, insurance, and tracking. Processes sender and recipient names, addresses, and parcel and tracking data, and transmits them to the selected carrier. | Standard Contractual Clauses (2021/914, Modules 2 and 3) with the UK IDTA, under EasyPost’s Data Protection Addendum |
Product functionality
| Subprocessor | Purpose and Personal Data processed | Transfer mechanism |
|---|---|---|
| Algolia | Search and listing indexes powering item and customer lookup in the merchant admin. Indexed records include customer name, email address, and associated item, offer, and payout fields. | Standard Contractual Clauses under the vendor’s DPA |
| MaxMind, Inc. | IP geolocation used to determine the applicable region and settings for a visitor. Processes IP address. | EU-U.S. DPF, with the UK and Swiss extensions, and the Standard Contractual Clauses under MaxMind’s DPA |
| Google Gemini (Google LLC) | AI-assisted features within the Services. Processes the content submitted to those features. | EU-U.S. DPF, with the UK and Swiss extensions |
Communications
| Subprocessor | Purpose and Personal Data processed | Transfer mechanism |
|---|---|---|
| AC PM LLC (dba Postmark) | Transactional email to merchants and sellers, including offers, shipping labels, and account notices. Processes recipient email address and message content. | Covered by ActiveCampaign, LLC’s EU-U.S. DPF certification, with the UK and Swiss extensions, and the Standard Contractual Clauses under the Postmark DPA |
| Resend (PLUS FIVE FIVE, Inc.) | Email delivery for the trendful.com contact form. Processes the name, email address, and message submitted. | EU-U.S. DPF with the UK extension, and the Standard Contractual Clauses (2021/914) with the UK Addendum under Resend’s DPA. Swiss transfers are not covered by either and are being confirmed with the vendor |
| Knock Labs, Inc. | Notification orchestration and delivery preferences. Processes recipient identifiers and notification content. | EU-U.S. DPF, with the UK and Swiss extensions, and the Standard Contractual Clauses (Modules 2 and 3, Irish law) with the UK Addendum under Knock’s DPA |
| Twilio Inc. | SMS notifications where enabled. Processes recipient phone number and message content. | EU-U.S. DPF, with the UK and Swiss extensions |
Operations and support
| Subprocessor | Purpose and Personal Data processed | Transfer mechanism |
|---|---|---|
| Sentry (Functional Software, Inc.) | Application error and performance monitoring. May incidentally process identifiers and request data contained in error reports. | EU-U.S. DPF, with the UK and Swiss extensions |
| Intercom, Inc. | Support messaging in the merchant admin. Processes merchant contact details and conversation content. | EU-U.S. DPF, with the UK and Swiss extensions |
| Slack Technologies, LLC, covered under the certification of Salesforce, Inc. | Internal operational alerting. May incidentally process identifiers contained in those alerts. | EU-U.S. DPF, with the UK and Swiss extensions |
Merchant-directed integrations
Where you connect Trendful to your own store or systems, data is shared with those platforms at your direction and under your agreement with them, not as a Trendful subprocessor. Shopify is the principal example: connecting your store shares listing, inventory, and order data between Trendful and Shopify.
Questions
Contact us at support@trendful.com.