Sub-processors
These are the third parties that process personal data on our behalf. Each is engaged under terms that impose obligations no weaker than those we owe you, and each is listed with what it actually touches rather than a category name.
| Processor | Purpose | Data | Location | Since |
|---|---|---|---|---|
| Model provider | Generates assistant replies from the question, the retrieved excerpts and your instructions | Conversation content | United States | 2026-01 |
| Cloud host | Runs the service; stores customer content, conversations and traces | All customer data | India (Bengaluru, DigitalOcean) | 2026-01 |
| Payment processor | Subscription billing and invoicing | Billing contact, payment method token | Varies by payment method | 2026-01 |
| Email provider | Transactional mail, invitations, password resets, receipts | Name and email address | United States | 2026-01 |
| OpenStreetMap Nominatim | Converts coordinates to a locality, only when a visitor presses the find-my-nearest-store button | Approximate coordinates, not retained | European Union | 2026-03 |
What is not on this list
No analytics vendor, no advertising network, no session recorder, no heatmap tool, and no third-party chat or form service. The site you are reading loads nothing from any third party, and the widget loads nothing beyond our own API.
Embeddings, the numeric representation used to search your content, are computed on our own infrastructure. That is the reason the model provider above receives conversation content but not your whole corpus.
Being told before it changes
We will publish an addition here at least 30 days before it starts processing, and email account owners at the same time. If you object to a new sub-processor within those 30 days, write to our contact form; where we cannot accommodate the objection you may terminate the affected service and we will refund the unused remainder.
To be notified without holding an account, mail our contact form and ask to be added to the sub-processor notice list.
Related
The data processing agreement governs our processing on your behalf, and the privacy policy explains what is collected in the first place.