Authorized subprocessors
These providers may process Customer Personal Data on behalf of RealLink AI. The exact services used depend on Customer configuration and feature use.
| Provider | Purpose and data | Location / transfer | Terms |
|---|---|---|---|
| Cloudflare, Inc. Active | Pages/Workers hosting, edge delivery, D1/R2 storage, security, rate limiting, Turnstile, logs, and related infrastructure. May receive Customer Content, End User content, identifiers, IP/device/security data, inquiry and reservation records. | Global network; United States and configured Cloudflare locations. DPA and SCCs or another lawful mechanism apply where required. | Cloudflare DPA |
| Google LLC / applicable Google Cloud contracting entity Active | Google Cloud Vertex AI inference, Gemini embeddings, managed open-model inference, Firestore vector/document storage, and service authentication. May receive uploaded training text, retrieved context, End User questions, response instructions, embeddings, account/service identifiers, and technical metadata. | Primarily US Central for current AI/embedding routes; Google global processing and selected/configured cloud locations may apply. Google Cloud CDPA, SCCs, and applicable adequacy mechanisms apply. | Google Cloud CDPA Google subprocessors |
Independent controllers and conditional recipients
The following providers are not listed as Customer-content subprocessors for every operation. They may process limited data under their own notices when a Business User or visitor chooses the relevant feature.
| Provider | When used | Role and information |
|---|---|---|
| Armitage Labs OÜ (Creem) | Checkout, subscriptions, refunds, billing portal, tax and payment administration. | Merchant of record and generally an independent controller for buyer/payment data; may also act as a processor for defined merchant services. RealLink AI does not send public-chat Customer Content to Creem. See Creem Privacy and Creem DPA. |
| Google Identity Services | Only when a Business User uses Sign in with Google. | Google and RealLink AI each process authentication/profile data under applicable terms. RealLink AI receives the approved profile fields needed to create and secure the account. See Google Privacy. |
| YouTube / Google | After a visitor presses play on a configured YouTube preview card. | RealLink AI server-fetches and temporarily caches the preview image. The browser connects directly to YouTube only after the visitor activates the privacy-enhanced iframe. See Google Privacy. |
| Spotify AB | After a visitor presses play on a configured Spotify preview card. | RealLink AI server-fetches and temporarily caches the preview image. The browser connects directly to Spotify only after the visitor activates the iframe. See Spotify Privacy Policy. |
| TikTok Technology Limited / applicable TikTok entity | After a visitor presses play on a configured TikTok preview card. | RealLink AI server-fetches and temporarily caches the preview image. The browser connects directly to TikTok only after the visitor activates the iframe. See TikTok EEA Privacy Policy. |
| Google Maps / Google | After a visitor presses the map button on a configured first-party preview. | The browser connects directly to Google Maps only after the visitor activates the iframe. See Google Privacy. |
| Calendly, LLC | Only after a visitor chooses a configured Calendly scheduling link. RealLink AI currently opens Calendly as an external page and does not embed it in the public AI response. | No Calendly iframe is loaded by RealLink AI. When the visitor clicks the link, Calendly receives the ordinary browser request and any information the visitor submits under Calendly's own terms. See Calendly Privacy Notice. |
Model routing clarification
Current production public-chat routes call Google Vertex AI endpoints. Some configured model identifiers refer to OpenAI's gpt-oss open models made available through Google Vertex AI. RealLink AI does not currently send production public-chat data directly to api.openai.com through the deployed /api3 route; therefore OpenAI is not listed as a current direct subprocessor for that route. This register will be updated before any direct production integration is enabled.
Changes and objections
Material additions or replacements will be announced at least 30 days before they take effect by email, dashboard notice, or a dated notice on this page. A Customer may object on reasonable data-protection grounds by emailing [email protected] during the notice period.
한국어 요약
YouTube, Spotify, TikTok, Google Maps는 먼저 RealLink AI 미리보기로 표시되고 방문자가 버튼을 누른 뒤에만 해당 업체 iframe으로 연결됩니다. 이 업체들은 RealLink AI의 일반 하위처리업체가 아니라 조건부 외부 수신자입니다. Calendly도 링크를 누른 뒤에만 연결됩니다. 자세한 내용은 외부 콘텐츠 안내를 확인하세요.