Legal
Sub-processors
Last updated: April 4, 2026
ChatbotIQ uses the following third-party service providers ("sub-processors") to deliver its services. All sub-processors are bound by data processing agreements ensuring appropriate safeguards for your data.
PostgreSQL and Redis databases are self-hosted on our infrastructure. Crawl4AI (web scraping engine) runs locally within our Docker containers. Neither constitutes a sub-processor.
| Provider | Purpose | Data Processed | Location | Training Opt‑out | Retention |
|---|---|---|---|---|---|
| Hetzner | Infrastructure hosting (servers, databases) | All application data | EU (Germany) | N/A | Per our retention policy |
| Sentry | Error tracking & performance monitoring | Stack traces, browser metadata (no PII) | EU (Germany) | N/A | 90 days |
| Mistral | Chat LLM | Queries & document text | EU (France) | No training (per API terms). No opt-out needed. | Short-term (abuse monitoring) |
| Pinecone | Vector database (embedding storage & retrieval) | Numerical vectors only | EU (Netherlands) | N/A — no text data | N/A |
| Stripe | Payment processing | Name, email, payment info | US / EU | N/A | Per Stripe data retention |
| OpenAI | Embedding generation + Chat LLM | Queries & document text | US | No training (default since Mar 2023). No opt-out needed. | 30 days (abuse monitoring) |
| Anthropic | Chat LLM | Queries & document text | US | No training. No opt-out needed. | 30 days (safety monitoring) |
| Google Gemini | Chat LLM | Queries & document text | US | No training (paid API). No opt-out needed. | Per Google Cloud terms |
| OAuth authentication | Email, name (via OAuth consent) | US | N/A | N/A | |
| Resend | Transactional email delivery | Email address, email content | US | N/A | Per Resend data policy |
Data Processing Notes
- LLM providers (OpenAI, Anthropic, Google, Mistral): All are used via paid commercial APIs which are contractually excluded from model training. We do not use your personal data or user content to train general-purpose AI models.
- Pinecone: Receives only numerical vector representations of text, never the raw text itself.
- Sentry: Configured with
send_default_pii=False. No personally identifiable information is sent.
Changes to Sub-processors
We will update this page when sub-processors are added or removed. Material changes will be communicated via email to account holders.
Questions
If you have questions about our sub-processors or data processing practices, contact us at [email protected].