Draft — pending legal review. Last updated 2026-07-13.
Sub-processors
These are the third parties your data may flow to when using the Avalon Incorporation platform, and what each is used for. Meilisearch (search) and Redis (caching/queueing) arenot listed — both are self-hosted on our own infrastructure, so there's no third-party data transfer to disclose for either.
| Processor | Purpose | Data shared | Status |
|---|---|---|---|
| AWS SES (Amazon Simple Email Service) | Transactional email (account, order, notification emails) | Name, email address, email content | Configured, not yet live — email sending lands in Slice 1 |
| Stripe | Payment processing | Payment details, billing address, order amount | Not yet integrated — lands in Slice 4 |
| PayPal | Payment processing (alternative gateway) | Payment details, order amount | Not yet integrated — lands in Slice 4 |
| Sentry | Error tracking and diagnostics | Technical error context (may incidentally include IP address, request metadata) | Wired as a no-op — becomes active once a DSN is configured |
| Google Tag Manager / GA4 / Microsoft Clarity | Site analytics (only after Analytics consent) | Usage/behavioral data, device/browser info | Not yet integrated — lands in Slice 6 |
| Cloudflare | CDN, WAF, DDoS protection, edge rate-limiting | IP address, request metadata | Not yet provisioned in front of this environment |