Authorized subprocessors
These providers may process Customer Personal Data on behalf of RealLink AI. The exact services used depend on Customer configuration and feature use.
| Provider | Purpose and data | Location / transfer | Terms |
|---|---|---|---|
| Cloudflare, Inc. Active | Pages/Workers hosting, edge delivery, D1/R2 storage, security, rate limiting, Turnstile, logs, and related infrastructure. May receive Customer Content, End User content, identifiers, IP/device/security data, inquiry and reservation records. | Global network; United States and configured Cloudflare locations. DPA and SCCs or another lawful mechanism apply where required. | Cloudflare DPA |
| Google LLC / applicable Google Cloud contracting entity Active | Google Cloud Vertex AI inference, Gemini embeddings, managed open-model inference, Firestore vector/document storage, and service authentication. May receive uploaded training text, retrieved context, End User questions, response instructions, embeddings, account/service identifiers, and technical metadata. | Primarily US Central for current AI/embedding routes; Google global processing and selected/configured cloud locations may apply. Google Cloud CDPA, SCCs, and applicable adequacy mechanisms apply. | Google Cloud CDPA Google subprocessors |
Independent controllers and conditional recipients
The following providers are not listed as Customer-content subprocessors for every operation. They may process limited data under their own notices when a Business User or visitor chooses the relevant feature.
| Provider | When used | Role and information |
|---|---|---|
| Armitage Labs OÜ (Creem) | Checkout, subscriptions, refunds, billing portal, tax and payment administration. | Merchant of record and generally an independent controller for buyer/payment data; may also act as a processor for defined merchant services. RealLink AI does not send public-chat Customer Content to Creem. See Creem Privacy and Creem DPA. |
| Google Identity Services | Only when a Business User uses Sign in with Google. | Google and RealLink AI each process authentication/profile data under applicable terms. RealLink AI receives the approved profile fields needed to create and secure the account. See Google Privacy. |
| YouTube / Google | Only when a configured public AI response displays a YouTube video card. | The visitor's browser connects to YouTube and may disclose IP/device and usage data to Google. See Google Privacy and the RealLink external-content notice. |
Model routing clarification
Current production public-chat routes call Google Vertex AI endpoints. Some configured model identifiers refer to OpenAI's gpt-oss open models made available through Google Vertex AI. RealLink AI does not currently send production public-chat data directly to api.openai.com through the deployed /api3 route; therefore OpenAI is not listed as a current direct subprocessor for that route. This register will be updated before any direct production integration is enabled.
Changes and objections
Material additions or replacements will be announced at least 30 days before they take effect by email, dashboard notice, or a dated notice on this page. A Customer may object on reasonable data-protection grounds by emailing [email protected] during the notice period.
한국어 요약
공개 챗봇의 대화·학습자료·통계·문의·예약 처리에 실제로 쓰이는 핵심 수탁업체는 Cloudflare와 Google Cloud입니다. Creem은 결제할 때, Google Identity는 구글 로그인할 때, YouTube는 영상 카드가 표시될 때만 관련 데이터를 각자의 개인정보처리방침에 따라 처리합니다.