Who touches your data.
Every external service with technical access to data passing through Hokku and gethokku.com — and what each one does.
Last updated August 2026.
Currently in production
Two third parties have technical access to data passing through gethokku.com:
- Vercel Inc. (incorporated in the United States) — static hosting for gethokku.com, served from its global edge network. Certified under the EU-US Data Privacy Framework.
- Web3Forms (operated by Aboutdata Software Pvt. Ltd., India) — receives the waitlist form submission and forwards it to our inbox. Standard Contractual Clauses cover the transfer outside the EEA.
Standard server logs are kept briefly by our host for security and abuse prevention. We never read them, and they are not joined to any identity.
When the Hokku Shopify app launches
The Hokku Shopify app is not live yet. The technical stack for launch is committed publicly through the manifesto and the roadmap:
- Application data hosted by Supabase in Frankfurt (European Union). Encrypted at rest and in transit. DPA in place.
- Error monitoring via Sentry, EU region.
- Resend (multi-region) — sends Hokku transactional emails (account, billing, support). Any transfer outside the EEA is covered by the EU Standard Contractual Clauses.
- Anthropic, PBC (United States) — powers the optional Hokku Assistant (in-app AI support chat) and processes conversation content, retained 30 days. Anthropic's DPA incorporates the EU Standard Contractual Clauses.
- We collect no payment data ourselves — billing runs through Shopify's native system.
- No third-party analytics, no tracking pixels, no advertising tags injected into your storefront.
How this page stays current
If a sub-processor is added, removed, or its scope changes — region, data category, transfer mechanism — this page is updated and the change is announced on /trust and in our public changelog.
Existing data subjects who object to a new sub-processor can request the removal of their data — see the privacy policy for the procedure.