ServiceWhat it does for RiptideData that reaches it
Fly.ioHosting · United States (primary region iad, Ashburn, Virginia)What it doesPrimary application hosting: the web app, API, Shopify/Stripe webhook handlers, realtime (SSE) endpoints, and the on-stream overlay run on Fly Machines. Fly also terminates TLS and stores application secrets.Data that reaches itAll request traffic to the app, application secrets (database URL, integration keys, encryption key), and server logs/metrics.
NeonDatabase · United StatesWhat it doesManaged Postgres database: the system of record for workspaces, shops, installations, live sessions, orders, queue entries, queue events, and webhook receipts.Data that reaches itAll workspace, order, queue, and webhook-receipt data, encrypted at rest. Shopify tokens and Discord webhook URLs are additionally encrypted by Riptide before storage.
ClerkIdentity · United StatesWhat it doesSeller identity, workspaces (organizations), and role management.Data that reaches itEmail address, display name, hashed password (if used), sign-in session metadata, and organization membership.
StripeBilling · United StatesWhat it doesSubscription billing: checkout, the customer billing portal, and webhook-driven subscription status. The card is tokenized and held by Stripe. Riptide never sees or stores your card number.Data that reaches itBilling email, country, and subscription/payment status. Riptide stores only Stripe identifiers and subscription status; the payment method stays with Stripe.
ShopifyOrders · Shopify-operated regionsWhat it doesMerchant integration authorized by the seller at install time. Source of truth for orders and line items.Data that reaches itOrders and line items the seller has authorized Riptide to receive via OAuth scopes and webhook subscriptions.
DiscordDelivery · United StatesWhat it doesOutbound delivery target for queue events, stalled-queue alerts, and wrap-up summaries when the seller configures a Discord webhook.Data that reaches itEmbed payloads the seller has opted to send (queue state, buyer handles, session metadata). The webhook URL is stored encrypted by Riptide.
PostHogAnalytics · United States (PostHog US Cloud, Riptide project)What it doesOptional acquisition and seller product analytics, enabled by browser consent and a separate owner/admin workspace preference for completed operations. Autocapture and session replay are disabled.Data that reaches itAllowlisted event and normalized page names, pseudonymous seller/workspace identifiers, live/manual/sandbox/test source labels and bounded task durations/error categories. No customer contact details, order contents, payment details, signed URLs, tracking numbers or unrestricted form text.
