Everyone who touches customer data on our behalf, named in full.
Selraiz uses the third parties below to deliver the service. Each is bound by a written contract that limits it to processing personal data on our documented instructions. We do not sell personal data and we do not share it for advertising.
This is where your data lives. It stays in the EU.
| Provider | Purpose | Location |
|---|---|---|
| Amazon Web Services (AWS) | Hosting, database, file storage and message delivery for the whole service | EU - Frankfurt (eu-central-1) |
| Amazon CloudFront | Delivery of the website and the embeddable widget; serves static files and connection metadata only | Global edge network |
To produce an answer, the conversation and the matching extracts from your training content are sent to a model provider. These providers are contractually prohibited from using that content to train their own models.
| Provider | Purpose | Location & safeguard |
|---|---|---|
| Anthropic PBC | Generates agent replies from your trained content | United States — EU standard contractual clauses, incorporated into Anthropic's data processing addendum |
| Google LLC | Converts text into embeddings so the agent can find the right passage of your content | United States — EU standard contractual clauses, supported by Google LLC's certification under the EU-US Data Privacy Framework |
| OpenKBS | Platform layer that routes our requests to the model providers above | [ENTITY, LOCATION & SAFEGUARD] |
The guided tour holds a spoken conversation: the visitor's audio streams from their browser to the speech-to-speech model below and generated speech streams back. It does not pass through our application servers and we write no recording or transcript of it to our database.
If that live connection cannot be established, the tour falls back to the visitor's own browser, which recognises and speaks voice using its built-in Web Speech capability. That audio never reaches us, we store no recordings of it, and the browser vendor handles it under the visitor's own browser and operating system settings.
| Provider | Purpose | Location & safeguard |
|---|---|---|
| Google LLC | Speech-to-speech model for guided tour conversations: recognises the visitor's speech and generates the spoken reply | United States — EU standard contractual clauses, supported by Google LLC's certification under the EU-US Data Privacy Framework |
| OpenKBS | Relay carrying the live audio stream between the visitor's browser and the model above | [ENTITY, LOCATION & SAFEGUARD] |
| Provider | Purpose | Location & safeguard |
|---|---|---|
| Stripe Payments Europe, Limited | Payment processing and subscription billing. Card details go directly to Stripe and never reach our servers | Ireland, with onward transfer to Stripe, LLC in the United States under Stripe's data transfer addendum (EU standard contractual clauses and the EU-US Data Privacy Framework) |
| Plus Five Five, Inc. (Resend) | Delivery of transactional email - password resets, lead alerts and service notices | United States — EU standard contractual clauses, supported by Resend's certification under the EU-US Data Privacy Framework |
We will update this page before a new sub-processor starts processing customer personal data, and give customers at least 30 days' notice by email. If you object to a new sub-processor on reasonable data protection grounds, tell us within that window at privacy@selraiz.com. If we cannot offer a workable alternative you may terminate the affected part of the service without penalty, as set out in the DPA.