legal . obvix labs
sub-processors.
Obvix Labs engages a small number of third-party services to operate amyy. the table describes the active service integrations. provider-specific storage locations and contractual controls depend on the account configuration.
for a copy of any current DPA, or to request that we notify you when this list changes, email connect@obvix.io.
| vendor | purpose | data | region |
|---|---|---|---|
| Microsoft Clarity (optional) | Masked interaction recordings and heatmaps for eligible adult accounts after analytics consent | Page layout, clicks, scrolls and browser metadata; rendered text masked; admin pages excluded | Microsoft service locations |
| Google LLC (Sign-in with Google) | Authentication | Google account ID, email, name | United States |
| Microsoft Azure (Microsoft Corporation) | OpenAI model inference, classification and memory extraction via Azure | Conversation messages processed to generate AI replies | EU / United States (region-dependent) |
| Hostinger International Ltd. | Application and database hosting | Stored account data, conversation history, memories and operational records | Provider account location |
| Cloudflare, Inc. | DNS and edge network / CDN | Request metadata (IP, headers) in transit | United States / global edge |
| Functional Software, Inc. (Sentry) | Application error monitoring | Error types and code locations; request data, message text and local variables removed | United States |
| Google LLC (Analytics, optional) | Aggregate page-view analytics — only after cookie consent, never for minors | Page paths and analytics identifiers | United States |
international transfers.
where data crosses jurisdictions (EU → US in particular), we rely on the standard contractual clauses each vendor publishes. EU users can request the SCC reference numbers from connect@obvix.io.
changes.
we notify the user-rights inbox above whenever a sub-processor is added or removed. the “last updated” date at the top reflects the most recent change.