Superlister legal
Third-party providers Superlister may use to operate and support its services.
Subprocessors
Last updated: 8 July 2026
This page lists the third-party subprocessors that SUPERLISTER LIMITED ("Superlister", "we", "us", or "our") may use to provide, secure, support, and improve our websites, applications, APIs, and related services (the "Services").
The Services are currently intended for users in the United Kingdom. Some subprocessors may process personal data outside the United Kingdom. Where required, we use appropriate safeguards for international transfers, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU standard contractual clauses, or equivalent transfer mechanisms.
This document is a draft list and should be reviewed before publication. Confirm each provider, legal entity, region, and enabled feature before relying on it.
Subprocessor List
| Subprocessor | Purpose | Personal Data Processed | Processing Location |
|---|---|---|---|
| Google Cloud | Cloud infrastructure, application hosting, databases, storage, task queues, secrets management, logging, monitoring, and Google Cloud Vision features. | Account data, user identifiers, listing content, product images and media, marketplace metadata, logs, diagnostics, authentication data, and integration data. | Primarily United Kingdom or European regions where configured; may include other locations for support, resilience, and service operations. |
| Vercel | Hosting and delivery of the web application, edge/network services, deployment tooling, and operational logs. | IP addresses, device and browser data, request metadata, usage logs, and limited account or session data. | Global infrastructure, including the United Kingdom, EEA, and United States. |
| Stripe | Subscription management, billing, invoicing, payment processing, fraud prevention, and payment support. | Name, email address, billing address, payment method metadata, invoices, subscription status, transaction identifiers, and tax information. | Global infrastructure, including the United Kingdom, EEA, and United States. |
| Resend | Transactional and service email delivery. | Name, email address, email content, message metadata, delivery events, and support or account notifications. | United States and other locations used to provide email delivery services. |
| Pusher | Real-time in-app notifications and event delivery. | User identifiers, tenant or account identifiers, channel names, event metadata, IP addresses, and device or connection metadata. | Global infrastructure, including the EEA and United States. |
| Sentry | Error monitoring, performance diagnostics, issue triage, and application reliability. | Error logs, stack traces, device and browser metadata, IP addresses, account or user identifiers where configured, and diagnostic context. | Global infrastructure, including the EEA and United States. |
| OpenAI | AI-assisted listing generation, content analysis, classification, quality checks, and automation features. | Prompts, listing content, product descriptions, item attributes, product images or media where enabled, generated outputs, and usage metadata. | United States and other locations used to provide AI services. |
| fal.ai | AI image processing, including background removal and related media transformation features. | Product images, image URLs or files, generated image outputs, request identifiers, and processing metadata. | United States and other locations used to provide AI services. |
| Pinecone | Vector database and retrieval features used for search, recommendations, classification, or AI-assisted workflows. | Embeddings, listing metadata, product attributes, generated content fragments, identifiers, and retrieval metadata. | United States and other locations depending on configured index region. |
| SerpApi | Search and enrichment features used to retrieve publicly available product, marketplace, or web information. | Search queries, product names, item attributes, listing context, and request metadata. | United States and other locations used to provide search API services. |
Connected Third-Party Integrations
Some third-party services are connected by you or your organisation and may act as independent controllers, separate providers, or marketplace partners rather than subprocessors of Superlister. Your use of those services is governed by their own terms and privacy notices.
| Third Party | Purpose | Data Shared |
|---|---|---|
| eBay | Marketplace account connection, listing verification, listing submission, listing updates, order or listing synchronisation, and related marketplace workflows. | Marketplace account identifiers, OAuth tokens, listing content, product images, item attributes, prices, shipping settings, return/payment policies, listing status, order metadata, and related API responses. |
| Google sign-in, if enabled | Account authentication and identity verification. | Name, email address, profile identifier, authentication metadata, and session metadata. |
Changes To Subprocessors
We may update this list as our Services and providers change. Where required by an agreement or applicable law, we will provide notice of material subprocessor changes before they take effect.
Contact
For questions about subprocessors, contact:
SUPERLISTER LIMITED
71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
privacy@superlister.com