SweepSpotPrivacy & data
The services
behind SweepSpot.
A practical overview of the providers used by the separate public SweepSpot app.
Updated October 16, 2026
| Provider | Purpose and information |
|---|---|
| Shopify | Commerce platform, app authorization, orders/customer fields needed for entry administration, customer-account/checkout surfaces and subscription billing. Shopify privacy policy. |
| Vercel | App and website hosting, encrypted configuration and private encrypted erasure journal. Processes requests, connection metadata and app data needed to deliver the service. Vercel privacy policy. |
| Supabase | Application database and private generated-export storage. The public database is configured in the US. Supabase privacy policy. |
| Upstash | Rate limiting with keyed digests rather than raw visitor identifiers in limiter keys. Public Redis is configured in US East. Upstash privacy policy. |
| Sentry | Sanitized error and operational monitoring, plus protected aggregate-health uptime checks. App telemetry excludes customer identities and raw request bodies, headers and URLs. Sentry privacy policy. |
Processing locations and safeguards
Our current planned merchant launch is United States only. Canadian merchant availability, including Quebec, is deferred. Canadian information can be processed in the United States and elsewhere in provider operations; no Canadian residency guarantee is offered. Read the Canadian privacy and transfer notice.
Primary application functions and the public database are configured in the United States. Provider networks and support can operate internationally. This list does not claim US-only processing or an independent compliance certification. Contract applicability, provider access and any required transfer terms are reviewed as part of launch readiness.
Merchant-downloaded files and the merchant’s other providers are controlled by that merchant. Contact the merchant for its own provider list and participant privacy notice.