Last updated: 11 October 2026
To run the Gallop builder and our hosted services, 9horsemen Limited uses third-party providers ("subprocessors") that process personal data for us. This page lists each one, what it does, where the company is based and, where we choose it, where our data is stored. How we use them is covered by our privacy policy and Data Processing Addendum.
Infrastructure and data storage
These providers host the platform, store our database and protect network traffic.
- Supabase, Inc. Database hosting and sign-in. Supabase runs on Amazon Web Services. Based in the United States. Our database is stored in Sydney, Australia.
- Cloudflare, Inc. Hosting, content delivery, file storage, firewall and bot protection (Turnstile). Based in the United States. Uploaded files are stored in Sydney, Australia. Requests are handled at the Cloudflare data centre nearest each visitor.
Communications
These providers deliver the transactional emails sent for businesses on Gallop.
- Resend, Inc. Transactional email delivery. Based in the United States.
Billing
These providers bill businesses for Gallop plans and add-ons.
- Stripe, Inc. Payment processing and subscription management for Gallop plans. Based in the United States.
Product analytics
This provider receives usage data, so we can see what's hard to use and which features matter most: anonymous counts of the steps people take in the Gallop builder and, in Gallop Admin, which features signed-in users use, linked to their account ID and business, plus counts such as bookings and sales per business. It never receives message text, names, emails, IP addresses or details of a business's customers.
- PostHog, Inc. Product analytics. Based in the United States. Our analytics data is stored in the European Union (Frankfurt, Germany).
AI models
These providers process what you type into the Gallop builder, and details of your business, to generate and edit your site. They don't use this data to train their models.
- Anthropic PBC. AI model API. Based in the United States.
- Google LLC. AI model API (Gemini). Based in the United States.
Optional features
- Google LLC. Google Search Console, only for businesses that turn on the Get found on Google add-on. Based in the United States.
Services visitors' browsers connect to directly
These aren't subprocessors, because we don't send them data. Pages on our services load content from them, so the visitor's browser connects to them directly and shares its IP address.
- Unsplash: photos on sites on Gallop.
- Google Maps: maps on sites on Gallop that show their location.
- Google Fonts: fonts in the business app on the web.
Changes to this list
As our services change, we may add or replace subprocessors. As our Data Processing Addendum sets out, we'll tell account holders at least 15 days before a new subprocessor starts processing personal data, and we'll update this page.
Questions? Email hello@9horsemen.com.