Subprocessors
Effective 16 August 2026 · Last updated 12 November 2026
Third parties that may process Zipper service or account data.
Current list
Hosted control-plane database and authentication (Postgres, Auth, storage) — stores workspace accounts and dashboards in the region configured for the deployment.
The compute host for tinyzipper.com — application compute and reverse proxy for the control plane and Portcullis Siteverify.
Paystack — card tokens, mobile money, bank transfer, recurring authorizations, and payout settlement. Zipper does not store raw PAN data.
Email delivery for transactional auth messages (signup verify, magic links, password reset, invites) via Zipper Email (SMTP on the global edge network). The auth service mints links only — it does not send those messages.
Updates
Material changes will be posted on this page. Questions: privacy@tinyzipper.com.