Last revised: 2026-10-21
Fileflare is operated by Kestrel Commerce, LLC, a Delaware limited liability company doing business as Fileflare. When you use Fileflare to sell digital files, we process your buyers’ personal data on your behalf. The companies below help us do that. Each one is bound by a written contract with data protection obligations at least as protective as our Data Processing Agreement (DPA).
| Subprocessor | What it does for Fileflare | Data it handles | Location | Privacy policy |
|---|---|---|---|---|
| Cloudflare, Inc. | File storage, content delivery and security | Your files; request and logging data | Western North America (file storage); global edge network | Privacy policy |
| DigitalOcean, LLC | Application and database hosting | All app data, including buyer and order records | United States (New York) | Privacy policy |
| Amazon Web Services, Inc. | Receiving and queuing Shopify events | Shopify order and product event data | United States | Privacy policy |
| Twilio Inc. (SendGrid) | Download email delivery | Buyer email address and email delivery data | United States | Privacy policy |
| Functional Software, Inc. (Sentry) | Error reporting | Request and logging data | United States | Privacy policy |
| Laravel Holdings Inc. (Nightwatch) | Application monitoring | Request and logging data | United States | Privacy policy |
| Intercom R&D Unlimited Company | Merchant support | Merchant contact and support data | United States | Privacy policy |
| Mixpanel, Inc. | Product analytics | Merchant usage data | United States | Privacy policy |
| Anthropic, PBC | Merchant feedback classification and interface translation | Merchant feedback text | United States | Privacy policy |
Where a subprocessor handles personal data from the EU, UK or Switzerland outside those regions, it does so under the EU Standard Contractual Clauses (with the UK Addendum and Swiss changes where they apply) or another safeguard in its data processing terms.
Your own storage and email
If you connect your own storage bucket (AWS S3, Cloudflare, Wasabi, DigitalOcean, Backblaze or another provider), you choose that provider and its region. It works for you, not for us, so it isn’t on this list. The same goes for sending download emails through your own SMTP server instead of SendGrid.
Changes to this list
We update this page before a new or replacement subprocessor starts handling your buyers’ data.
- Merchants with a signed DPA get an email at least 30 days before the change.
- Anyone else can ask to be notified: email support@fileflare.io with your myshopify.com domain.
You can object to a change on reasonable data protection grounds by writing to support@fileflare.io within those 30 days. We’ll talk it through with you, and if we can’t resolve it you can end the affected part of the service and we’ll refund any prepaid fees for the time after it ends.
Need a DPA?
Email support@fileflare.io with your store’s legal name and myshopify.com domain, and we’ll send our Data Processing Agreement for signature. See our Privacy Policy for how we handle data as a company.
Kestrel Commerce, LLC d/b/a Fileflare · 1111B S Governors Ave, Suite 3239, Dover, DE 19904, United States