Convertfy uses the infrastructure sub-processors below to provide the service. Each is engaged under a written contract containing data-protection terms and, for transfers outside the EEA / UK, appropriate safeguards (EU Standard Contractual Clauses / UK Addendum and/or EU-U.S. Data Privacy Framework certification). We notify operators of changes to this list in advance as set out in our DPA.
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Vercel Inc. | Application hosting, serverless functions, edge network (also derives coarse geolocation from IP) | Operator account data; visitor event, conversion, experiment and heatmap data in transit and at the edge | United States / global edge network |
| Neon Inc. | Managed Postgres database hosting | All stored operator and visitor data | United States |
| Clerk, Inc. | Authentication and identity / organisation management | Operator account identity data (name, email, profile image, membership) | United States |
| Cloudflare, Inc. | Object storage (R2) for uploaded campaign images and heatmap page snapshots | Operator-uploaded images; masked DOM snapshots (no form values) | United States / global network |
Suggested privacy-policy clause for operators
Operators that install Convertfy are the controller of their visitors’ data and must disclose the use of Convertfy in their own privacy policy. Below is suggested wording operators can adapt to their jurisdiction.
Third-party service providers. We use third-party providers to help us understand and improve how visitors use our site. This includes Convertfy, a conversion-analytics and on-site messaging service. When you use our site, Convertfy may process technical and interaction data on our behalf, including your device and browser type, the pages you view and how you interact with on-site messages and page content, your approximate location (country, and where available region/city, derived from your IP address; the IP address itself is not stored by Convertfy), and, where you register or deposit, an account reference and transaction details used to measure campaign performance. Convertfy does not set cookies or create a persistent identifier for you, and does not use this data for its own advertising. For more information, see Convertfy’s privacy policy at https://convertfy.io/privacy.
Notes for operators:
- If your jurisdiction requires consent for analytics or behavioural processing,
obtain it before the Convertfy SDK runs, and reflect Convertfy in your consent
banner / tracking-technologies notice (Convertfy itself sets no cookies and uses
only session-scoped
sessionStorage). - If you enable conversion tracking, make sure your notice covers sharing an account reference and transaction data with an analytics processor.
- Operators must also enter into Convertfy’s Data Processing Agreement.