1. Current sub-processors
For your shoppers’ data, your store is the controller and Hawkeyed is its processor (see the privacy policy). These companies are our sub-processors: they host or run parts of Hawkeyed and process data only to provide it.
| Company | Purpose | Data | Location |
|---|---|---|---|
| Cloudflarecloudflare.com | Runs the Hawkeyed web app (Cloudflare Workers) and serves hawkeyed.io. | Everything the app shows or receives passes through it: account details, your store’s data as it’s displayed, request logs. | Global network; the app’s server code is placed near Google Cloud us-central1 (United States) |
| ClickHouseclickhouse.com | Analytics database (ClickHouse Cloud on Google Cloud) holding the copy of your store and running the queries behind dashboards, reports, alerts and Kestrel. | Your store’s data, including shoppers’ personal data (names, email addresses, phone numbers, addresses, orders), and the raw archive of BigCommerce responses. | Google Cloud us-central1, Iowa, United States |
| Convexconvex.dev | App database and backend: accounts, Kestrel’s conversations and runs, scheduled reports, alerts and workflows. | Account details, encrypted store tokens, conversations (with the query results they contain, which can include shoppers’ data), memories, files, dashboards, settings and usage. | United States |
| Railwayrailway.com | Runs the webhook receiver, the sync service that copies your store, and its queue (Redis). | Your store’s data while it’s being copied, and BigCommerce webhook notifications (the kind of change and the record’s ID). | United States (US East) |
| Anthropicanthropic.com | AI models (Claude) that power Kestrel, including its web searches. Anthropic’s commercial terms don’t allow training on this data. | Your questions and the conversation, a description of your store’s tables, the results of Kestrel’s queries (which can include shoppers’ data), memories, instructions and attachments. | United States |
| Resendresend.com | Sends Hawkeyed’s emails: reports, alerts and account emails. | Recipients’ email addresses and the email’s content, which can include your store’s figures and report attachments. | United States (AWS us-east-1) |
| Composiocomposio.dev | Connects the apps you choose (for example Gmail, Outlook or Slack) so Kestrel and workflows can use them. | The connected accounts and their access, and what Hawkeyed sends to or reads from those apps at your request, which can include your store’s data. | Composio’s cloud; see Composio’s own sub-processor list |
| Mapboxmapbox.com | Map tiles for the maps on dashboards. | Requests from the viewer’s browser (IP address, browser details, which tiles) and an anonymous identifier. Your store’s figures are drawn in the browser and aren’t sent to Mapbox. | United States |
Cloudflare cloudflare.com
- Purpose
- Runs the Hawkeyed web app (Cloudflare Workers) and serves hawkeyed.io.
- Data
- Everything the app shows or receives passes through it: account details, your store’s data as it’s displayed, request logs.
- Location
- Global network; the app’s server code is placed near Google Cloud us-central1 (United States)
ClickHouse clickhouse.com
- Purpose
- Analytics database (ClickHouse Cloud on Google Cloud) holding the copy of your store and running the queries behind dashboards, reports, alerts and Kestrel.
- Data
- Your store’s data, including shoppers’ personal data (names, email addresses, phone numbers, addresses, orders), and the raw archive of BigCommerce responses.
- Location
- Google Cloud us-central1, Iowa, United States
Convex convex.dev
- Purpose
- App database and backend: accounts, Kestrel’s conversations and runs, scheduled reports, alerts and workflows.
- Data
- Account details, encrypted store tokens, conversations (with the query results they contain, which can include shoppers’ data), memories, files, dashboards, settings and usage.
- Location
- United States
Railway railway.com
- Purpose
- Runs the webhook receiver, the sync service that copies your store, and its queue (Redis).
- Data
- Your store’s data while it’s being copied, and BigCommerce webhook notifications (the kind of change and the record’s ID).
- Location
- United States (US East)
Anthropic anthropic.com
- Purpose
- AI models (Claude) that power Kestrel, including its web searches. Anthropic’s commercial terms don’t allow training on this data.
- Data
- Your questions and the conversation, a description of your store’s tables, the results of Kestrel’s queries (which can include shoppers’ data), memories, instructions and attachments.
- Location
- United States
Resend resend.com
- Purpose
- Sends Hawkeyed’s emails: reports, alerts and account emails.
- Data
- Recipients’ email addresses and the email’s content, which can include your store’s figures and report attachments.
- Location
- United States (AWS us-east-1)
Composio composio.dev
- Purpose
- Connects the apps you choose (for example Gmail, Outlook or Slack) so Kestrel and workflows can use them.
- Data
- The connected accounts and their access, and what Hawkeyed sends to or reads from those apps at your request, which can include your store’s data.
- Location
- Composio’s cloud; see Composio’s own sub-processor list
Mapbox mapbox.com
- Purpose
- Map tiles for the maps on dashboards.
- Data
- Requests from the viewer’s browser (IP address, browser details, which tiles) and an anonymous identifier. Your store’s figures are drawn in the browser and aren’t sent to Mapbox.
- Location
- United States
2. Who isn’t on the list
- BigCommerce is where your store’s data comes from, not a sub-processor: Hawkeyed reads from it with the read-only access you approve.
- OpenAI and Google. Hawkeyed’s code can use their models, but neither is turned on. We’ll add a provider here before any of your data is sent to it.
- Services we use to build Hawkeyed that never receive your store’s or your team’s data aren’t listed.
3. Changes to this list
We update this page, and the date at the top, before a new sub-processor starts processing your data. To be told by email when it changes, or to raise an objection, write to privacy@hawkeyed.io.