Legal
Subprocessors
Every third party that will process merchant data on our behalf, what it is for, and where it runs. This page is the authoritative list. It changes before a change takes effect, never after.
This document is available in English only. A translated version would have to be reviewed by a lawyer in each jurisdiction before it could be relied on, and an unreviewed translation of a contract is worse than none. The English text governs.
Last updated 9 August 2026. Today the operative list has one entry, because the product has no merchants and processes no merchant data. The second table is what the launch list is expected to be, published early so nobody discovers it at signature.
In use today
| Provider | What it does | Data it can reach | Where |
|---|---|---|---|
| Server hosting provider | Runs the website and its database | Early access email addresses; 30-day web logs | United States |
That is the whole list. There is no analytics provider, no email marketing platform, no customer messaging tool, no error tracker and no content delivery network in front of this site.
Expected at launch
None of these are engaged yet. They are listed because a merchant evaluating this product deserves to know the shape of the answer before committing to a trial, rather than after.
| Provider | What it does | Data it can reach | Where |
|---|---|---|---|
| Bank data aggregator | Holds the bank credential and grants read access to transactions, only where a merchant opts in | Bank transactions of the account the merchant connects | United States |
| Transactional email provider | Sends account email: sign-in, alerts, reconciliation notices | Merchant email address and the content of the message | United States |
| Error and uptime monitoring | Reports crashes and outages so they are noticed before a merchant reports them | Technical diagnostics; no order, payout or accounting records | United States |
| Off-site encrypted backup | Holds encrypted database backups so a failure is recoverable | Everything in the database, encrypted, with the key held by us | United States |
Not subprocessors
The store platforms and accounting systems a merchant connects — Shopify, Square, WooCommerce, QuickBooks, Xero, Sage, FreshBooks, Odoo — are not our subprocessors. They are the merchant's own systems, and the merchant already has a direct relationship with each of them. We read from and write to them on the merchant's instruction; we do not pass their data to a fourth party.
The on-premise agent for QuickBooks Desktop and Sage 50 runs on the merchant's own machine, under the merchant's control. It is software, not a provider, and no third party is involved in it.
How changes are announced
Before a new subprocessor begins processing merchant data, this page is updated and every merchant is notified with at least 30 days' notice. A merchant who objects on reasonable data protection grounds may terminate without penalty for the remainder of the paid term, and be refunded pro rata.
To be told of changes without checking this page, write to privacy@matchitfy.com and ask to be added to the notification list.
Contact
Privacy: privacy@matchitfy.com
See also the privacy policy, the security page and the terms of service.