Sub-processors

A sub-processor is a company Devya engages that may process the personal data of a store’s customers. The services a merchant chooses to connect to its own store are listed separately below: they work under the merchant’s own agreement with them.

• Contabo GmbH — hosting: the servers that run the platform and hold its database, files and backups. All the data in the platform. Germany (EU).

• Hostinger — a second copy of the backups, on a separate Devya server, kept for the same 14 days. Germany (EU).

• Email delivery — none yet: email is not switched on in production, so the platform sends no email. The provider will be added to this list, with the notice above, before it is.

These receive data only when a merchant turns them on for its store, and then under the merchant’s own agreement with them:

• Paymob — card and wallet payments: the customer’s name, email address, phone number and the amount. Egypt.

• Bosta — deliveries: the recipient’s name, phone number, email address, address and parcel details. Egypt.

• Google Analytics 4 (Google) and the Meta Pixel (Meta) — the store’s own analytics and advertising tags, only after the customer allows them in the store’s cookie banner. United States.

• Moving POS (Devya) — the store’s orders, with the customer’s contact details and delivery address, when the merchant connects its own Moving POS account, under that account’s terms.

• The merchant’s own webhooks and integrations — order and customer events, sent to the addresses the merchant sets.

The platform can work with these services, but none of them is switched on: an AI assistant and translation (Anthropic), translation (Google Cloud Translation), a spam check on forms (Cloudflare Turnstile), and the payment gateways Kashier and Moyasar. Before any of them is switched on, it is added to this list with notice.

We update this list, and its date, at least 14 days before a new or replacing sub-processor starts, and we tell merchants in the back office or by email. A merchant may object, as our data processing terms describe, by writing to hello@devya.dev.