Sub-Processor List

Last updated: 12 September 2025

Overview

This document lists all third-party sub-processors that Kai Technology Labs Ltd uses to provide the Service. We are committed to transparency about who processes your data and for what purposes.

Note for Consumer Accounts. Sub-processors listed here may handle data you connect to the Service. If you use consumer integrations, you acknowledge and accept that this may incidentally include sensitive or special category data, and you remain responsible for ensuring a lawful basis for such processing.

Notification of Changes

We will notify users of any changes to this sub-processor list via:

  • Email notification (30 days before the change)
  • Service announcement
  • Update to this document

Business customers, on signed standalone agreements, may object to new sub-processors within 30 days of notification.

Personal customers may contact support to discuss concerns.

Current Sub-Processors

Infrastructure & Platform Services

Sub-Processor Purpose Example Data Processed Location Website
Temporal Cloud Workflow orchestration and task scheduling Encrypted operational data, task IDs, processing status Europe (GCP, europe-west3) temporal.io
Google Cloud Platform Cloud infrastructure and hosting All application data (encrypted) Europe (europe-west2 and europe-west1) cloud.google.com
Cloudflare Content delivery network and DDoS protection IP addresses, request headers Global cloudflare.com

Authentication & Payments

Sub-Processor Purpose Example Data Processed Location Website
Clerk User authentication and session management Email, name, authentication tokens, session data EU/US clerk.com
Stripe Payment processing and subscription management Payment information, billing details, transaction history EU/US stripe.com

AI Processing Services

Sub-Processor Purpose Example Data Processed Location Website
Google Vertex AI AI model for task extraction and summaries Email/message content EU cloud.google.com/vertex-ai
OpenAI AI model for content analysis Email/message content US/EU openai.com
Anthropic AI model for content processing Email/message content US/EU anthropic.com

Analytics & Support

Sub-Processor Purpose Data Processed Location Website
DataDog Application monitoring and session replay Performance metrics, session recordings (with consent), error logs EU datadoghq.com
Usersnap Customer feedback and support widget Support tickets, user feedback, screenshots EU usersnap.com
Google Analytics Website analytics (marketing site only) Website usage data, anonymized IP addresses EU/US analytics.google.com
PostHog Product analytics (marketing site only) User interactions, feature usage EU/US posthog.com

Communications & Marketing

Sub-Processor Purpose Data Processed Location Website
SendGrid Transactional and marketing email delivery Email addresses, email content, engagement metrics EU/US sendgrid.com
GetLaunchList Waitlist management (marketing site only) Email addresses, IP addresses US getlaunchlist.com

Data Protection Measures

All sub-processors are required to:

  • Sign Data Processing Agreements (DPAs)
  • Implement appropriate security measures
  • Comply with GDPR requirements
  • Only process data per our instructions
  • Delete data upon termination

Your Rights

For Individual Users

  • You can disconnect integrations to stop processing by specific sub-processors
  • You can request deletion of your data from all sub-processors
  • You can opt-out of analytics and marketing processing

For Business Customers on standalone signed agreements

  • You have 30 days to object to new sub-processors
  • You can request additional information about sub-processor security
  • You can audit sub-processor compliance (subject to DPA terms)

Contact

For questions about our sub-processors or to exercise your rights:

  • Email: support@hellok.ai
  • Post: 85 Great Portland Street, First Floor, London, W1W 7LT

For data protection concerns: