Legal
Sub-processors
Last updated 11 June 2026
These are the providers Bonsai Studio uses to operate Bonsai WMS. Each receives only the data needed for its role.
Railway
Backend application hosting, private networking and service runtime.
Merchant account data, operational WMS data, logs and service metadata.
Neon
Managed Postgres database hosting and backups.
Merchant account data, products, orders, inventory, shipment records and operational history.
Netlify
Public marketing website hosting.
Website request metadata and frontend delivery logs; dashboard traffic metadata where applicable.
Auth0
Authentication, login, identity and organisation membership metadata.
User names, email addresses, login identifiers and authentication metadata.
Shopify
Connected commerce platform for product, order, inventory and fulfilment sync.
Store, product, order, customer and fulfilment data supplied by the merchant's Shopify store.
Sendcloud
Shipping label generation and carrier services.
Recipient names, shipping addresses, parcel details, carrier selections and tracking references.
Stripe
Billing, subscriptions and payment links.
Billing contact details, subscription status and payment metadata. Card data is handled by Stripe, not Bonsai Studio.
Resend
Contact form and transactional email delivery.
Email addresses and message content sent through website or product email flows.
Sentry
Error monitoring and reliability diagnostics when enabled.
Error traces, request metadata and limited diagnostic context. We avoid sending sensitive payloads where practical.
Changes
We update this page when a material provider is added or removed. If a merchant has a reasonable data protection objection to a new sub-processor, they should contact hello@bonsaistudio.dev before continuing to use the affected functionality.