The companies that handle data for Actorly, what each one does, what it receives and where. The list is public, so you do not need to ask for it.
Effective 2026-10-13. The same list is in the data processing agreement, the privacy policy and the security page. If they ever differ, this page is the one we update first.
1.1A subprocessor is a company that ONDUTYOPS LLC engages to help run Actorly and that handles data to do it. Each one works under a written agreement that asks it to protect the data to a standard no lower than the data processing agreement sets.
1.2Shopify is the platform Actorly runs inside and the source of the data. It is not our subprocessor. A webhook address a merchant chooses for alerts is the merchant's own and is not a subprocessor either.
Back to contents| Company | What it does for Actorly | What it receives | Where | Transfer mechanism |
|---|---|---|---|---|
| Cloudflare, Inc. | Hosts Actorly and stores its data: the app, each store's change history, saved copies of what Shopify sent, and Actorly's account records. Also serves this website. | Everything described in the data table of the privacy policy. | Cloudflare's global network. Actorly does not restrict its data to a country or region. | EU Standard Contractual Clauses, incorporated into Cloudflare's own customer-facing addendum |
| PostHog | Counts product events about Actorly itself, for example that a plan was chosen. Not in use today: used only if product analytics is switched on, with notice first. | Nothing today. If switched on: the store's myshopify.com domain, the plan name and billing period, counts and durations. No customer data and no store content. | United States, by default, if switched on | EU Standard Contractual Clauses (Module Two) and the UK Addendum, in PostHog's data processing addendum |
| Slack | Delivers operational notices to Actorly's own team workspace, so the team sees when an install or an import needs attention. | The store's myshopify.com domain and a short status. No customer data and no store content. | United States | EU Standard Contractual Clauses in Slack's data processing addendum |
3.1PostHog and Slack never receive customer data, store content, or a customer's name, address, email address or phone number. Actorly does not currently send product analytics. If it were switched on, the service would send PostHog only the events and fields listed in a fixed table in its code, and would drop anything else before it is sent.
3.2Actorly sends no data to any advertising, analytics or marketing service from this website. The website sets no cookie for visitors and uses no tracking, as the cookie policy says.
Back to contents4.1Cloudflare states that its platform holds the certifications listed on the security page and the privacy policy, each as Cloudflare scopes it. Actorly itself holds no certification of its own.
Back to contents5.1When we add or replace a subprocessor, we update this page, the data processing agreement, the privacy policy and the security page, and we tell merchants in advance, in the app, through Shopify or by email to the store owner, before the new subprocessor starts to process data.
5.2A merchant with a reasonable objection on data protection grounds can write to [email protected] before the date in the notice. We will work with the merchant in good faith, which may include not routing its data to that subprocessor where that is technically possible or, if the objection cannot be resolved, letting the merchant end the affected part of the service without penalty.
5.3A merchant that does not object before that date is taken to have authorised the new subprocessor.
Back to contents6.1ONDUTYOPS LLC. Email: [email protected]. Postal address: Coastal Highway, Lewes, Delaware 19958, United States.
Back to contents