Subprocessors
Effective 16 August 2026 · Last updated 16 August 2026
Third parties that may process Zipper service or account data.
Current list
Supabase (Postgres, Auth, storage) — control-plane database and authentication, region as configured on the project.
The VPS host for tinyzipper.com — application compute and reverse proxy for the control plane and Portcullis Siteverify.
Paystack — card tokens, mobile money, bank transfer, recurring authorizations, and payout settlement. Zipper does not store raw PAN data.
Email delivery for transactional auth messages (magic links, password reset) via the configured SMTP or Supabase Auth provider.
Updates
Material changes will be posted on this page. Questions: privacy@tinyzipper.com.