Legal · Who helps us
Companies that help us run Pasal
Last updated 8 August 2026
This is the full list of companies that hold or handle data as part of Pasal, lifted out of the Privacy Policy so it can be read on its own and kept up to date on its own. It is complete as of the date above. If it changes, we will update this page and tell shop owners before the change takes effect. Nothing here is sold to anybody: each company handles data to do its part and nothing more.
- 01
Supabase
What they do. The database, sign-in, file storage and the server functions Pasal runs on.
What reaches them. Everything Pasal stores: owner, staff and shopper accounts; orders with customer names, phones, emails and delivery addresses; khata; loyalty; bookings; tickets; repair jobs; the Ledger; catalog photographs; and customers' payment screenshots.
Where. On Supabase's servers, outside Nepal. Ask us and we will tell you the country.
- 02
Vercel
What they do. Hosts and serves pasal.studio, every storefront and the server side rendering, and attaches a shop's claimed subdomain.
What reaches them. Every request it serves, so visiting IP addresses, browsers and requested pages, in its logs. The subdomain a shop claims.
Where. Server functions in Mumbai, India. Its network is worldwide.
- 03
Resend
What they do. Delivers every email Pasal sends, including the sign-in codes sent through Supabase.
What reaches them. The recipient's address and the whole message: order contents, customer name, phone and delivery address, invoice numbers, a shop's registered legal name and PAN, receipt and ticket PDFs, sign-in codes, and the owner's daily summary email including today's bookings by name and phone.
Where. Outside Nepal. Ask us and we will tell you the country.
- 04
Anthropic
What they do. Powers the help assistant in the shop dashboard.
What reaches them. The question an owner types and the last six messages of that conversation, each cut to 2,000 characters. No shop record, order or customer data is attached by Pasal.
Where. United States.
- 05
eSewa
What they do. Payment gateway. A shop can connect its own merchant account for its customers' payments, and Pro plans would be paid to us this way.
What reaches them. The amount, a transaction id we issue, a merchant product code and a signature. A shopper's browser is sent to eSewa, so eSewa also sees them and whatever they give its own login. No card, bank or account number reaches Pasal at any point.
Where. Nepal.
- 06
Google, for two typefaces
What they do. Serve two typefaces, Space Mono and Caveat, requested by your browser on every page of pasal.studio and every storefront.
What reaches them. The visitor's IP address, browser and the page they are on, on every page load, requested by their browser directly.
Where. Worldwide.
- 07
Google, Mozilla or Apple, for push
What they do. Deliver order alerts to a shopkeeper's device. Which company is involved is decided by that person's browser, not by Pasal.
What reaches them. The device subscription and the fact that an alert was sent. The alert content is encrypted to the device.
Where. Worldwide.
- 08
Unsplash and Pexels
What they do. Host the stock photography used on Pasal's own demo shops at pasal.studio/demo and on the pages that preview a template while a shop is being set up. A shop's own catalog uses photographs its owner uploaded, which are stored with Supabase.
What reaches them. The visitor's IP address, browser and the page they are on, when that page is one of our demo shops or a template preview.
Where. Canada and Germany, served worldwide.
- 09
Cloudflare
What they do. Answer the name service for pasal.studio, so a browser asking where Pasal lives gets a reply, and carry the traffic on its way to us.
What reaches them. The visitor's IP address and the address being looked up. This happens before any page loads, for every visitor, and it is unavoidable for any site on the internet: somebody has to answer that question.
Where. Worldwide, from whichever of their locations is nearest the visitor.