Subrocessor List

Last updated: 28/01/2026

This document lists third-party subprocessors used by App Attic Ltd to operate, secure, and support the Lantern services.

All subprocessors process personal data only as necessary to provide their services and are subject to contractual confidentiality, security, and data protection obligations.

1. Core platform and infrastructure

These subprocessors are required to host, store, and operate the Lantern platform.

• Google Cloud Platform — Infrastructure services and internal tooling. Processing locations: European Union.
• Vercel — Application hosting and deployment infrastructure. Processing locations: Global.
• Bunny CDN — Content delivery network for fast, secure delivery of assets. Processing locations: Global.

2. Analytics and product insights

Used to understand product usage, performance, and improve the Services.

• Google Analytics — Website and product analytics. Processing locations: EU and non-EU.
• Tinybird — Event-based analytics and reporting. Processing locations: European Union.
• Segment — Event routing and analytics infrastructure. Processing locations: EU and non-EU.

3. Customer support and internal communications

Used to support merchants and coordinate internal operations.

• Intercom — Customer support and in-app communications. Processing locations: EU and non-EU.
• Slack — Internal team communications. Processing locations: EU and non-EU.

4. Scheduling and bookings

Used to enable meeting scheduling and booking functionality.

• Calendly — Booking meetings, demos, and consultations. Processing locations: United States and other regions.

5. Marketing, sales, and partner management

Used for marketing communications, lead management, and partnerships.

• Klaviyo — Marketing communications and lifecycle messaging. Processing locations: United States.
• Mailchimp — Email marketing campaigns. Processing locations: United States.
• Customer.io — Product and marketing communications. Processing locations: United States.
• Crossbeam — Partner relationship management. Processing locations: United States.

6. AI and automation services

Used to support optional AI-powered features.

• OpenAI — AI-assisted content generation, analysis, and summarisation. Processing locations: United States and other regions. Note: data submitted via Lantern is not used to train OpenAI models.

7. Platform dependencies and authentication

Required for Shopify app installation and lifecycle management.

• Shopify — App authentication, billing metadata, installation lifecycle. Processing locations: Global.

8. Merchant-enabled integrations

Lantern integrates with a range of third-party tools chosen and enabled by merchants, including but not limited to:

• Email and SMS marketing platforms
• Subscription management services
• Review platforms
• Automation and workflow tools

When enabled, personal data may be shared with these providers at the merchant's instruction. These providers act under their own terms and privacy policies.

A current list of supported integrations is available at:

9. International access and transfers

Personal data is stored on servers located in the European Union.

Some subprocessors and authorised personnel may access personal data from outside the EU or UK. Where required by applicable law, appropriate safeguards are in place.

10. Updates

We may update this Subprocessor List as our Services evolve. Changes will be reflected by updating the "Last updated" date above.