legal . obvix labs
sub-processors.
Obvix Labs engages a small number of third-party services to operate amyy. each entry below identifies the service, what it processes, and where it sits.
for a copy of any current DPA, or to request that we notify you when this list changes, email connect@obvix.io.
| vendor | purpose | data | region |
|---|---|---|---|
| Google LLC (Sign-in with Google) | Authentication | Google account ID, email, name | United States |
| OpenAI, L.L.C. | AI language model (GPT) that generates replies | Conversation messages required to generate replies | United States / EU |
| Microsoft Azure (Microsoft Corporation) | Cloud compute and AI infrastructure (model inference and processing) | Conversation messages processed to generate AI replies | EU / United States (region-dependent) |
| Hostinger International Ltd. | Application hosting, database, and encrypted backups | Amy data at rest (encrypted disks + backups) | Germany (EU) |
| Cloudflare, Inc. | DNS and edge network / CDN | Request metadata (IP, headers) in transit | United States / global edge |
| Functional Software, Inc. (Sentry) | Application error monitoring | Stack traces (no request bodies, no PII) | United States |
| Google LLC (Analytics, optional) | Aggregate page-view analytics — only after cookie consent, never for minors | Page paths, anonymized client identifiers | United States |
international transfers.
where data crosses jurisdictions (EU → US in particular), we rely on the standard contractual clauses each vendor publishes. EU users can request the SCC reference numbers from connect@obvix.io.
changes.
we notify the user-rights inbox above whenever a sub-processor is added or removed. the “last updated” date at the top reflects the most recent change.