What this page covers
A subprocessor is a third-party company that AuctionZu, offered by Intellizu LLC ("AuctionZu", "we"), uses to provide the service and that may process personal information in the course of that work. This includes Customer Data that auction businesses ("houses") keep in their AuctionZu accounts, which we process on each house's behalf, as described in our Privacy Policy and Terms of Service.
Each subprocessor may use the data only to provide its service to us, under a written agreement that requires it to protect the data.
Current subprocessors
| Subprocessor | What it does for AuctionZu | Data it handles | Location |
|---|---|---|---|
| Amazon Web Services, Inc. | Cloud hosting for the whole service: application servers, the database, file storage (Amazon S3), content delivery for the website, console, storefronts and photos (Amazon CloudFront), transactional email (Amazon SES), email delivery notifications (Amazon SNS) and secret storage. | All data in the service: house account and team details, catalog content and photos, bidder accounts and registrations, bids, invoices, payment records (not card numbers), consignor records, messages, the content and recipients of the emails we send, and server logs. | United States (US East, Northern Virginia region) |
| Stripe, Inc. | Card payments and card holds through Stripe Connect, on each house's own Stripe account; house payment account onboarding. | Buyer email address, payment amounts, invoice numbers and descriptions, house and account identifiers. Card details are entered directly on Stripe's hosted pages and never pass through AuctionZu. | United States, and other locations where Stripe operates |
| Google LLC (Google Workspace) | Email hosting for auctionzu.com addresses, including support, sales and privacy mailboxes. | Whatever people send to an @auctionzu.com address, such as names, email addresses, business details, demo request answers and privacy requests. | United States, and other locations where Google operates |
A note on Stripe
Stripe processes card payments under each house's own agreement with Stripe, and each house is the merchant of record. For the card details it collects, Stripe acts under its own privacy policy and its agreement with the house. AuctionZu uses Stripe as the Connect platform to start checkouts, card holds and refunds on the house's account and to receive payment updates.
Other services we use
These providers support the service but do not receive Customer Data:
- Cloudflare, Inc. hosts the DNS records for auctionzu.com. It answers DNS lookups only; website, console, storefront and API traffic does not pass through Cloudflare.
- Let's Encrypt (Internet Security Research Group) issues the TLS certificates that secure houses' custom storefront domains. It receives only the domain name being certified.
Changes to this list
Before a new subprocessor begins processing Customer Data, we will update this page and email house account owners at least 30 days in advance. If we must make a change sooner to keep the service running or secure, we will notify account owners as soon as we can.
A house that objects to a new subprocessor on reasonable data protection grounds may tell us at privacy@auctionzu.com within that notice period. We will work with the house in good faith to address the concern. If we cannot, the house may close its account before the change takes effect and receive a refund of any prepaid fees for the remaining period.
To receive these notices at an address other than your account owner's email, write to privacy@auctionzu.com.
Contact
Questions about our subprocessors: privacy@auctionzu.com.