Sub-processors | MySmartCoPilot

Version subprocessors-2

The short version

By category and country

Each kind of company is listed by what it does with your data and where it processes it.
30 days’ notice

Workspace owners get an email 30 days before we add or replace one, and may object.
No training on your data

None of them may use a workspace’s data to train AI or for advertising.

Who helps us run the workspace tools

These kinds of companies process the personal data in workspaces for us, under contracts with data-protection duties like those of our data processing agreement (version dpa-3). We remain responsible to you for what they do.

Sub-processors by category, what they do, what they receive and where
Category	What it does	What it receives	Where
Hosting	Runs our servers, databases and file storage, and keeps its own daily snapshots of our hosting account.	Everything a workspace holds, as we store it: files and sensitive answers encrypted with the workspace’s own keys, the rest of the database as stored.	The United Kingdom and the European Economic Area
Proxy and bot check	Carries every request to our servers, protects them from attacks, and checks that a form or report is sent by a person and not a bot.	Each request as it passes, with the visitor’s IP address and browser details.	The United States, with data centres around the world
AI processing	Runs the AI parts of the tools (drafts, translations, summaries and the automated runs) under agreements that do not let it train on what it receives.	The text a request needs, with the personal details we recognise masked where the task allows.	The United States, with data centres around the world
Email delivery	Sends confirmations, notifications, invitations and receipts, and receives replies and bounces.	The recipient’s address and our fixed message, never a form’s answers.	The United Kingdom and the European Economic Area
Payment providers	Take payments and make refunds. For a payment in US dollars made through a seller of record, that seller sells the plan or run to you and issues your invoice.	What you buy, its price and the details you give at checkout.	India, the United Kingdom and the United States
Our own backups	Our own nightly copy of the workspace databases, encrypted before it leaves our servers, on our own full-disk-encrypted machine.	The workspace databases, encrypted.	India
Operations and support tools Only for a workspace whose owner gives support access.	Help our team read a workspace’s content to answer the owner’s request.	The content the owner’s support access covers, for its 72 hours.	The United States

None of them may use a workspace’s data to train AI or for advertising. Our proxy and bot-check provider also uses connection details for its own protection against attacks, as the privacy policy explains, and a seller of record keeps what it needs for the sale and its taxes.

Changes and objections

We email every workspace owner at least 30 days before we add a kind of company to this list or replace one, and the list then gets a new version id. You may object in writing within those days. If we can’t meet your objection, you may stop using the workspace tools and delete your workspace, after exporting what you need.

Names on request

Once India’s Digital Personal Data Protection Rules give the people in your data the right to know who processed it, we send the names of these companies to a workspace owner who asks in writing, by email. We don’t publish them on a page.

Accounts you connect

An account you connect to a workspace yourself, such as your own AI key or your online store’s accounts, is your own choice and works under your own agreement with that company. It is not on this list.

Contact

Questions about this list? Use the contact form (topic “Privacy or data request”) or email support@mysmartcopilot.com.

This is version subprocessors-2 of the sub-processor list.