Legal
Sub-processors
The carriers and service providers that receive or process personal data when you use the ORDFLOW platform.
Last updated: November 3, 2026
ORDFLOW Ltd ("ORDFLOW") uses the third parties listed below to provide its shipping platform. Each of them receives only the data it needs for its task, is bound by confidentiality and data protection terms, and may use the data only to provide its service. We do not sell personal data, do not share it for advertising, and do not send order or buyer data to AI services. Data received from Amazon and other sales channels is used only to fulfil the merchant's own orders. How we handle personal data is described in our Privacy Policy.
1. Carriers
A carrier receives data only when the merchant selects it for a shipment, and only the data of that shipment: recipient name, shipping address, phone (and e-mail where the carrier requires it), parcel and customs data — of that shipment only. All carrier connections use encrypted (TLS) APIs. Each carrier processes the data under its own terms and privacy policy as needed to transport and deliver the parcel, including in the countries of origin and destination.
| Carrier | Service | Location |
|---|---|---|
| DHL Express | Labels, customs, international delivery | Germany / DHL global network |
| DHL eCommerce | Labels, delivery | United States |
| FedEx | Labels, customs, delivery | United States / FedEx global network |
| UPS | Labels, customs, delivery | United States / UPS global network |
| UPS Israel | Labels, delivery in Israel | Israel |
| bpost (Landmark Global) | Labels, delivery | Belgium / carrier network |
| Israel Post | Labels, customs, delivery | Israel |
| USPS | Labels, delivery; US address validation | United States |
| Stamps.com / Endicia (Auctane) | USPS labels | United States |
| eHub | USPS labels | United States |
| Cheetah (Chita) | Domestic delivery in Israel | Israel |
| YunExpress | Cross-border e-commerce delivery | China / carrier network |
| Showbal (i-Pack Express) | Labels, delivery | Carrier network (origin and destination countries) |
| PostPlus | Labels, delivery | Carrier network (origin and destination countries) |
| Pylon Logistics | Labels, delivery | Carrier network (origin and destination countries) |
| ShipX | Labels, delivery | Carrier network (origin and destination countries) |
| Morning Global | Labels, delivery | Carrier network (origin and destination countries) |
2. Service providers
| Provider | Purpose | Personal data | Location | When |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Hosting, database, file storage, backups, sending of service e-mails | All data processed in the ORDFLOW platform | Ireland (EU, region eu-west-1) | Always |
| Google — Address Validation API | Validation of a recipient address | Recipient address only (no name, phone or e-mail) | United States / global | When a user validates an address |
| USPS — Addresses API | Validation of US recipient addresses | US recipient address | United States | When a US shipment is created |
| U-PIC | Shipping insurance | Shipment and recipient data of insured shipments | United States | Only for shipments the merchant chooses to insure |
| Rivhit | Accounting and invoicing | Invoice recipient name and address, order and amount | Israel | Only if the merchant enables this integration |
| iFreelance | Accounting and invoicing | Invoice recipient name and address, order and amount | Israel | Only if the merchant enables this integration |
| Google Workspace | Company e-mail and customer support | Content of e-mails sent to us | Global | When you contact us |
| Google Fonts | Web fonts in the ORDFLOW application | IP address and browser information (no order data) | Global | When the application is loaded |
3. Planned sub-processors
We list new sub-processors here before they start processing personal data.
| Provider | Purpose | Personal data | Location | From |
|---|---|---|---|---|
| BulkSMS (bulksms.com) | Sending one-time sign-in codes by SMS (multi-factor authentication) | Mobile phone number of the merchant user and the code (no order or buyer data) | To be stated before use | Once SMS verification is introduced |
4. Sales channels
Orders are imported from the merchant's own sales channels (for example Amazon, Shopify, Etsy, eBay, Walmart, WooCommerce, Magento, BigCommerce, Wix, Squarespace and TikTok Shop), which also receive the shipment confirmation and tracking number. These channels act for the merchant and are not ORDFLOW sub-processors; data from one channel is never sent to another channel or to another merchant.
5. International transfers
Our platform is hosted in the European Union (Ireland). Data sent to carriers and service providers outside Israel and the EU is transferred in line with Israeli law on the transfer of data abroad and, where applicable, GDPR Chapter V (adequacy decisions, Standard Contractual Clauses, the EU–US Data Privacy Framework, or necessity for the shipment the recipient is expecting).
6. Changes and contact
We update this page when we add or replace a sub-processor. Merchants are informed of significant changes by e-mail. Questions: privacy@ordflow.com.