Subprocessors
Effective 16 August 2026 · Last updated 16 August 2026
Third parties that may process Zipper service or account data.
Current list
Supabase (Postgres, Auth, storage) — control-plane database and authentication, region as configured on the project.
The compute host for tinyzipper.com — application compute and reverse proxy for the control plane and Portcullis Siteverify.
Paystack — card tokens, mobile money, bank transfer, recurring authorizations, and payout settlement. Zipper does not store raw PAN data.
Email delivery for transactional auth messages (signup verify, magic links, password reset, invites) via Zipper Email (SMTP on Global Server nodes). Supabase Auth mints links only — it does not send those messages.
Updates
Material changes will be posted on this page. Questions: privacy@tinyzipper.com.