1. Operator
Shifter is operated by Shifter Strategy FZ-LLC, a UAE company holding UAE trade licence No. 17003064. Questions about subprocessors can be sent to legal@shifter.co.
This page supports the Privacy Policy and Data Processing Addendum. It is intentionally practical: the exact stack for a Customer can vary by Order, tools, CRM, calendar, AI model, messaging provider and Customer instructions.
2. Website and public-site providers
| Provider | Purpose |
|---|---|
| Vercel | Website hosting, deployment, content delivery, enquiry processing, technical security logs and aggregate page-visit analytics without analytics cookies. Custom-event analytics are disabled. |
| Google Analytics 4 | Optional website and conversion measurement, loaded only after explicit analytics consent. Receives sanitised public page addresses and fixed events for page visits, plan choices, checkout starts, server-accepted enquiries and Stripe-verified purchases. Purchase events include the actual amount and currency and a hashed transaction identifier for duplicate prevention. Form contents, email addresses, submitted website addresses, card details, payment tokens, raw checkout references and URL query strings or fragments are excluded, apart from any of the four campaign tags (utm_source, utm_medium, utm_campaign and utm_content) in the link you arrived by. Advertising features and Google Signals are disabled. See the Cookie Policy for controls. |
| Resend | Delivers the website enquiry notification to Shifter, including the details submitted in the form, and confirmation emails to people who request a free check. |
| Google Workspace | Hosts Shifter's business email, including enquiries and our replies. |
| Google Search Console | Website ownership, indexing and organic search reporting. It adds no visitor-tracking tag. |
| Stripe | Subscription billing and payment processing for an agreed engagement. Enquiry submission does not create a payment. |
3. Customer workflow provider categories
Depending on the Order and customer instructions, Shifter services may use provider categories such as Google Workspace, Microsoft 365, CRM/helpdesk/spreadsheet/database/knowledge-base systems, Slack, Airtable, Notion, Zapier, Make, n8n, email providers, messaging platforms, cloud hosting, databases, logging, monitoring, queueing, storage, billing, contracts, e-signature, support and analytics tools.
4. Customer-directed systems
Many connected tools are chosen, owned or authorised by the Customer. Customer-directed systems are governed by the Customer's own contracts, permissions and account settings. Shifter is not responsible for third-party terms, availability, policy changes or data handling outside the services we control.
5. AI providers and model services
Shifter may use AI providers such as OpenAI, Anthropic, Google AI, Microsoft Azure AI / Azure OpenAI, xAI or comparable providers depending on the workflow, customer needs and available configuration. We aim to use provider settings and workflows appropriate for business data and customer instructions.
We do not intentionally use Customer Personal Data to train third-party public AI models unless expressly agreed or provider settings/terms support no-training for that data.
6. Updates and objections
We may update this page when we add, remove or materially change subprocessors or provider categories. Customers may object to a new subprocessor on reasonable data protection grounds by contacting legal@shifter.co. We will work in good faith to address reasonable objections, which may include using an alternative provider, disabling a feature or allowing termination of the affected service according to the applicable Order.