Legal

Sub-processors

Last updated: 5 October 2026

YourTracking uses the sub-processors below to provide the Service. Each is engaged under terms consistent with our Data Processing Agreement. We keep this list current and dated, and we email clients at least 14 days before we add or replace a sub-processor, so they can object.

Sub-processorPurposeDataRegion
Google Cloud PlatformHosting, managed database, secret storage, and the load balancer and TLS edge for the YourTracking platform.All service data at rest (encrypted), delivery credentials (in Secret Manager).EU (europe-west1)

Platforms you connect

These are not our sub-processors. Data reaches them because you connect them, on your instruction, and they handle it under your own agreement with them.

PlatformWhat it receives or providesDataRegion
Google (Google Ads, Data Manager)The conversions you configure, and your account's spend and results for your dashboard.Hashed customer identifiers (email, phone, name), postal code and country, click identifiers, order value and currency.USA / EU
Meta Platforms (Conversions API)Your store's Meta events.Hashed customer identifiers, Meta click and browser identifiers, IP address and browser, order value and currency.USA / EU
ShopifyYour order and store data (through the app you install) and your shoppers' consent state.Order, product, refund and customer records of your connected stores; consent signals.USA / EU
Klaviyo (only when you connect it)Read with the key you give us, to show your email results and to match sales. We never write to it.Flow and form results; a visitor's profile when needed to match a sale.USA / EU

Onward transfers & your instruction

When you connect a platform (Google Ads, Meta, Shopify) you instruct us to send your data to that platform to deliver the conversions you configured; the platform then handles that data under its own terms. We never sell data and never use one customer's data for another. Questions: info@yourtracking.ai.