Legal

Subprocessors

The providers that handle customer data for Sinrix, what each does, and how you hear about changes.

Last updated

On this page

The short version

  • 5 providers handle customer data for Sinrix, each for one purpose, named below with what they see.
  • Each is bound by a contract that protects the data at least as well as our own commitments.
  • We tell account owners at least 30 days before a new one starts, and you may object.

1. What a subprocessor is

A subprocessor is a company we use to run Sinrix that handles personal data inside your brands on our behalf. Under the Data Processing Addendum, your business is the controller of that data, we are its processor, and these companies are our subprocessors.

2. Our subprocessors

  • Provider
    Krova Cloud
    What it does for Sinrix
    Hosts each brand's database, files and containers, and the sandboxes where its agents run code.
    What it handles
    Everything in a brand: its chats, files, knowledge, connected accounts' data its agents read, and its people's names and addresses.
  • Provider
    Anthropic
    What it does for Sinrix
    The AI models a brand's co-founder and teams use, and their web search, on the AI usage Sinrix provides.
    What it handles
    The text of each request a brand's agents send to the model, the files and pages they include, and the answers.
  • Provider
    Composio
    What it does for Sinrix
    Connects a brand's agents to the apps its people choose, such as Gmail and Slack.
    What it handles
    The sign-in a person gives when they connect an app, and the data the brand's agents read from or send to that app.
  • Provider
    IDrive e2
    What it does for Sinrix
    Keeps each brand's backups away from the server it runs on.
    What it handles
    A copy of everything in a brand: its backup, taken every 24 hours.
  • Provider
    Stripe
    What it does for Sinrix
    Takes payment for plans and AI usage, and keeps cards and invoices.
    What it handles
    The account owner's name, email address and billing details, and card details, which Sinrix never sees.

3. What is not on this list

  • Services you choose yourself. An app you connect to your brand, or a model provider whose key you set for it, works for you under its own terms, not as our subprocessor.
  • Providers of our own business. The providers that host our website and database and deliver our email handle the account data we control, as the Privacy Policy describes, and are bound by contract the same way.

4. Each one's commitments

Before a provider handles customer data, we check how it protects data, and we bind it by a written contract to use the data only to provide its service to us, keep it confidential and secure, help us meet requests from the people it concerns, and delete it when it is no longer needed. Where data leaves the European Economic Area or the United Kingdom, the contract includes the Standard Contractual Clauses or another lawful transfer mechanism. We remain responsible for what our subprocessors do.

5. Changes

We email each brand's owner at least 30 days before a new subprocessor starts handling customer data, and update this page. If you object on reasonable data protection grounds, write to privacy@sinrix.com within that time. We will try to find a way forward, and if we cannot, you may end the affected brand's subscription and receive a refund of fees you paid for the time after it ends.