Sub-processors

Escrova, Inc. · This list was last checked against our code on 2026-08-01

A sub-processor is a company we use to run Escrova that handles some of your data along the way. This is the full list. Each one gets only what its job needs. We do not sell personal data.

Our Privacy Policy says what each of these does with your data and what your rights are. When a recipient changes, we publish a new version of that policy and ask you to accept it again.

Running the service

  • Privy signs you in and looks after your built-in wallet.
  • Neon is our database.
  • Vercel hosts the site and the API and stores the photos people upload.
  • Solana RPC providers read the blockchain and send our transactions to it.

Buying and delivering

  • Zinc places your concierge orders with the retailer. It receives the delivery name, address and phone number, because a parcel cannot be sent without them.
  • Amazon and Walmart receive that same address from Zinc, because they are the ones who ship the parcel.
  • AfterShip checks delivery status from a tracking number.

Finding things and entering your address

  • SerpApi and eBay receive the words you type into search, not your identity.
  • Alibaba and Temu would receive the same search words.
  • Google Places and Photon turn what you type in the address field into suggestions. Photon is run by Komoot and uses OpenStreetMap data.

Checks and payments

  • Sumsub verifies a seller's identity. Buyers never use it.
  • Jupiter quotes the conversion when you pay in SOL.

Messages

  • Web push services carry notifications to your device. Which one it is depends on your browser: Google, Mozilla, Apple or Microsoft.
  • Expo push carries notifications to the Escrova mobile app. Expo relays them through Google and Apple, the same parties web push uses.
  • An Email provider will carry order email to you. We have not chosen one yet, and no email is sent today.
  • Telegram would carry internal alerts to our own staff, not to you.

Only after you accept cookies

  • Google Analytics measures how the site is used.
  • Microsoft Clarity records heatmaps and sessions. Address fields are masked.

Neither of those loads, and neither sets a cookie, until you press Accept on the cookie banner.

Not switched on today

These are built and ready, and none of them receives anything at the moment: AfterShip, Telegram, the Email provider, Jupiter, Alibaba and Temu. They are listed above rather than hidden, because the switch is a settings change and we would rather this page were already right when somebody flips it.

Questions about this list, or a request for our processing agreements, can go to [email protected].

Questions about this document: [email protected]