Subprocessor register

Shopify provides installation, authenticated Admin APIs, storefront extensions, customer-event infrastructure, app pricing, and mandatory privacy webhooks under the merchant's Shopify relationship.

A dedicated United Kingdom hosting environment runs the Upsell Pilot application, PostgreSQL database, worker, scheduler, and encrypted local backups. It is isolated from other Fleeta applications.

Cloudflare supplies authoritative DNS for the Fleeta domain. The current Upsell Pilot record is DNS-only, so application HTTP payloads do not transit Cloudflare's reverse proxy.

Optional AI explanations are unavailable unless Fleeta explicitly configures the feature. When enabled, requests contain minimised, source-referenced store facts, exclude customer identity, use the API with response storage disabled, and remain advisory rather than an authority for money, inventory, statistics, or launch decisions.

Another Fleeta application receives data only after a merchant authorises an implemented, same-shop adapter and sees the exact data boundary. No integration shares a database, Shopify session, or encryption key with Upsell Pilot.