1.What this list is
1.1.Sub-processors are companies that process personal data on our behalf so that Headora can work: they store data, deliver e-mails, run requests to AI models and take payments.
1.2.We work with sub-processors under their data processing terms (including Standard Contractual Clauses where provided). Sub-processors that create video and photo effects store the files they receive under their own policy — see the table.
2.Categories of sub-processors
| Category | Purpose | Data | Location |
|---|---|---|---|
| Hosting, databases and file storage | Service servers; storing accounts, chats, memory and files | All Service data | EU (Frankfurt, Germany) |
| Content delivery network and protection (CDN, DNS) | Fast site delivery, attack protection, country detection | IP address, technical request data | Global network |
| AI model developers | Answers, images, videos, documents | Requests, context, memory, files, photos, hashed ID | United States and other countries |
| Technical partner for access to AI models | Passing requests to text and image models; requests go only to developers whose terms say they do not store them or train on them | Requests, context, memory, files, photos, hashed ID | United States |
| Image and video generation partners | Video, trends and scenes from photos | Photos, task description; stored under their own policy | United States and other countries |
| Memory vectorisation (through the technical partner) | Search in project memory | Text of memory facts | United States |
| Web search | Answers with search, if you turn it on | Search query | United States |
| E-mail delivery | Sign-in codes, service e-mails | E-mail address, message text | United States |
| Google and Apple sign-in | Verifying sign-in, if you choose this method | Sign-in token, e-mail, name | United States |
| Push notifications | Delivering notifications to your device | Device token, notification text | United States |
| Payment partners | Taking payments | Order number, amount, currency; card details are entered on the partner’s side | Kazakhstan, Kyrgyzstan |
Company names — [founder decision: publish a named list].
3.Changes to this list
3.1.We update this list when we add or change sub-processors. The date of the update is shown at the top of the page.
3.2.Questions: support@headora.ai.