Legal
Sub-processors
These are the third parties Flokte relies on to run the service and process merchant data. This list is referenced by the Data Processing Agreement.
| Sub-processor | Purpose | Data | Location | Status |
|---|---|---|---|---|
| Google Cloud Platform | Hosts the Flokte application and its database. | Customer, order, return, score and dispute data. | United States | In use since launch |
| Cloudflare | Network edge for the Flokte application. | Customer, order and return data in transit. | Global network; United States | In use since launch |
| Resend | Transactional email. | Recipient email address and the email contents. | United States | In use since launch |
| OpenRouter, with TypeSafe as model provider | Classifies return and refund reasons, and checks whether a shipping address looks deliverable. | Return and refund reasons and notes, item titles, and shipping address lines without name, email or phone. | United States (OpenRouter); TypeSafe's location is being confirmed | In use since October 2026 |
| Vercel | Hosts this website, including the privacy-request form and the partner portal. | Privacy-request submissions. | United States | In use since launch |
Notice of changes
Last updated: October 6, 2026.
Under the Data Processing Agreement, Flokte gives merchants at least 30 days' notice before a new sub-processor starts processing their data: it is added to this page with the date it takes effect, and merchants who have asked to be notified are emailed. Flokte imposes data-protection terms on each sub-processor that are no less protective than the DPA. To be notified of changes to this list, email legal@flokte.com.