GDPR & Privacy

For personal information about our own website visitors and merchant account holders,Technio acts as the data controller. When a merchant uses Technio to serve their shoppers, the merchant is generally the controller of that shopper information andTechnio acts as the processor on the merchant’s behalf.

You can request confirmation of whether we process personal information about you and, where we do, a copy of that information.

You can ask us to correct information that is inaccurate or incomplete. Where possible, corrections are made through the dashboard directly.

You can ask us to delete your personal information, subject to exceptions such as legal recordkeeping or ongoing legitimate interests that we can lawfully continue to rely on.

Where applicable, you can request a portable, machine-readable copy of information you provided to us and, where technically feasible, have it transmitted to another provider.

You can object to certain processing based on legitimate interests and request that we restrict processing while we evaluate your request.

Retention periods depend on the category of information and the purpose of processing. Detailed information is provided in our Privacy Policy.

To operate the Services we engage the following subprocessors. Each processes personal information only for the purpose listed and under a written agreement. We update this list when a subprocessor is added or replaced.

• Stripe (US/EU) — payment processing, connected accounts and payout compliance.
• Finix (US) — alternative payment processing for eligible merchants.
• Clerk (US) — authentication, accounts and organization membership.
• Supabase via Lovable Cloud (US/EU) — database and encrypted file storage.
• Sumsub (UK/EU) — identity verification (KYC) for merchant onboarding.
• Resend (US) — transactional email (receipts, application updates).
• Chargeblast (US) — dispute and chargeback alerts.
• Vercel (US) — hosting for the dashboard and merchant checkout domains.
• Cloudflare (US/EU) — DNS, content delivery and bot protection.
• Sentry (US) — application error monitoring (no personal data sent).
• Plausible (EU) — cookieless, aggregate website analytics.
• Bunny Fonts (EU) — web font delivery, no IP logging.
• Intercom (US) — support messaging; loads for signed-out visitors only with functional-cookie consent.
• Calendly (US) — demo scheduling; loads only with functional-cookie consent.
• Shopify and WooCommerce stores — the merchant’s own store systems, for order synchronization.

• We use appropriate safeguards for cross-border transfers, including standard contractual clauses where required.
• We perform transfer risk assessments and apply supplementary measures where appropriate.

To exercise any of these rights, email admin@technio.io with enough information to verify your identity and describe your request. We aim to respond within the timeframes required by applicable law.