List of Sub-processors
Last updated: August 15, 2026
Introduction
This page lists all third-party sub-processors engaged by Moore World Wide Enterprises, LLC to process personal data on behalf of gigiii marketplace users. We carefully select sub-processors that maintain high standards of data protection and security.
Current Sub-processors
| Sub-processor | Purpose | Data Location | Data Protection Safeguards |
|---|---|---|---|
| Vercel Inc. (vercel.com) | Hosting, CDN, serverless functions, edge computing, file storage; optional analytics (Vercel Analytics / Speed Insights) when the visitor opts in to analytics cookies | United States and global edge network | Standard Contractual Clauses (SCCs), SOC 2 Type II, ISO 27001, GDPR-compliant DPA |
| Neon (Neon Tech Inc.) (neon.tech) | Serverless PostgreSQL database hosting and management | United States and EU regions (configurable) | Standard Contractual Clauses (SCCs), SOC 2 Type II, GDPR-compliant DPA |
| Google LLC (google.com) | Authentication (Google OAuth) when enabled; optional analytics via Google Tag Manager and Google Analytics 4 when the visitor opts in to analytics cookies | United States and global | EU-U.S. Data Privacy Framework, Standard Contractual Clauses, GDPR-compliant DPA |
| Microsoft Corporation (microsoft.com) | Authentication (Microsoft Entra ID) when enabled; optional analytics via Microsoft Clarity (session replay / heatmaps) when the visitor opts in to analytics cookies | United States and EU | EU-U.S. Data Privacy Framework, Standard Contractual Clauses, ISO 27001, SOC 2 |
| GitHub, Inc. (github.com) | Authentication provider (GitHub OAuth) when enabled | United States | Standard Contractual Clauses, SOC 2 Type II, ISO 27001, GDPR-compliant practices |
| Resend (resend.com) | Transactional email delivery (notifications, invites) and email magic-link authentication when enabled | United States | Standard Contractual Clauses, GDPR-compliant DPA, SOC 2 |
| pretix GmbH (pretix.eu) | Paid public-event ticketing (checkout, ticket email, SCAN check-in) when a member publishes a paid event; organizer is merchant of record via payment providers they configure in pretix | European Union (Germany) | GDPR-compliant DPA with pretix GmbH; EU hosting |
Changes to Sub-processors
We will notify users at least 30 days in advance of adding or replacing sub-processors. Notification will be provided via email and a notice on this page. Users may object to a new sub-processor within 30 days of notification.
Contact Us
For questions about our sub-processors or data processing practices, contact us at hello@moorewwe.com