ReguCart is provided by Shivam Bector, trading as Debug Ninja (a sole proprietorship). We use the service providers below to run the Service. Each processes data only to provide its service to us, under its contract terms with us. This list forms part of our Privacy Policy (regucart.com/privacy) and Data Processing Addendum (regucart.com/dpa).
1. Current subprocessors
| Provider | What it does for us | Data it processes | Where | Status |
|---|---|---|---|---|
| Railway (Railway Corporation) | Hosts the app, background workers, the crawler, the Postgres database and the Redis job queue; keeps daily database backups | All data the Service stores in its database: shop data, scan results, store profile, Terms acceptance records, grievance records (personal fields encrypted), seller form data, logs | Southeast Asia (Singapore) region | Active |
| Cloudflare (Cloudflare, Inc.) | Hosts regucart.com (Cloudflare Pages), DNS for regucart.com, cookieless website analytics (Cloudflare Web Analytics), and R2 object storage for screenshots, page captures, reports, uploaded documents and grievance photos | Website visit data; the stored files, which may contain personal data | Asia-Pacific (R2 location hint APAC); website and DNS served from Cloudflare's global network | Active |
| Anthropic (Anthropic, PBC) | AI processing through the Claude API (classification, review, extraction, drafting, summaries) | Store content, screenshot crops, uploaded invoices and licences sent for a task. Not used to train Anthropic's models under its commercial terms | United States and other countries where Anthropic and its providers operate | Active |
| Amazon Web Services (Amazon Web Services India Private Limited) | Email delivery through Amazon SES, from notifications@mail.regucart.com | Recipient email addresses, email content (for example scan alerts, and complaint acknowledgements that include a copy of the complaint), delivery logs | Asia Pacific (Mumbai) region, ap-south-1 | Active |
| Porkbun (Porkbun LLC) | Domain registrar for regucart.com; forwards email sent to support@regucart.com | Support emails in transit | United States | Active |
| Google (Google LLC, Gmail) | Receives and stores support emails forwarded from support@regucart.com | Support emails and attachments | Google data centres (global) | Active |
| Sentry (Functional Software, Inc.) | Error monitoring for the app and workers | Error reports and technical context, configured to exclude tokens and personal data | To be confirmed when activated | Planned, not yet active. We will give notice under section 3 before we start using it |
2. Other parties who are not our subprocessors
- Shopify provides the platform the app runs on and bills merchants through Shopify App Pricing. Shopify processes data as an independent party under its own terms with merchants and with us.
- Merchants decide how complaints and vendor details submitted on their stores are used. They are the Data Fiduciary for that data.
3. Changes to this list
3.1 We will update this page at least 14 days before a new subprocessor starts processing personal data that we handle for merchants, and tell merchants in the app or by email. Merchants may object as described in clause 5.3 of the DPA.
3.2 In an emergency (for example, a provider failure), we may change a subprocessor immediately and will give notice as soon as practicable.
3.3 To ask about this list, write to support@regucart.com.
4. Change history
| Version | Change |
|---|---|
| 2026-10-08 | First published list |