Subprocessors

These companies process personal data for Hephon Commerce. Each gets only what it needs for its part of the service. We give retailers 30 days' notice before adding one (see the DPA).

Replies and search

• OpenRouter (United States) routes each assistant reply to the AI model the retailer chose. It sees messages, product details from the catalog and the basket.
• AI model hosts reached through OpenRouter (United States and other countries, depending on the model the retailer picks), for example Google, OpenAI and the hosts of open models, write the assistant's replies. They see messages, product details and the basket.
• Google (United States) turns product text and shopper searches into search embeddings. It sees product text and the words of a search.
• Typesafe, api.typesafe.ai (United States, west), checks that search results match what the shopper asked for. It sees messages and product names.

Voice

• Hamsa (region to confirm) turns Arabic voice messages and calls into text. It sees voice audio.
• OpenAI (United States) turns voice messages and calls into text. It sees voice audio.
• Cartesia (United States) speaks the assistant's replies. It sees reply text.

Operations

• Langfuse (European Union) keeps traces used to debug and measure replies. It sees messages and replies, with phone numbers and emails masked.
• Cloudflare (global network) stores files (R2) and delivers the site. It sees uploaded files and request data.
• Sentry (United States) collects error reports. It sees technical data and parts of a request when an error happens.
• IPinfo (United States) gives an approximate city for an IP address, for abuse checks. It sees IP addresses.

Questions: privacy@hephon.ai