Subprocessors
The providers GlotEO uses to host the service, translate content, deliver email, and measure the marketing site.
This register lists the subprocessors that process personal data or customer content for GlotEO. It is part of our Privacy Policy and Data Processing Addendum.
We will update this page before we start using a new subprocessor for customer content, or as soon as practicable afterwards if the change is needed to protect the service. Business customers covered by the Data Processing Addendum may object to a new subprocessor as that addendum describes.
| Provider | Purpose | Data processed | Location | Retention | Documentation |
|---|---|---|---|---|---|
| Supabase, Inc. | Application database, authentication, file storage, and serverless functions | Account details, hashed credentials, connected site content, translations, glossaries, and project files | Cloud region configured for the GlotEO project, which may include the United States | While the account needs the data, then deleted on the schedule in the Privacy Policy | Privacy |
| OpenAI | AI-powered content processing, translation, and localization features that call the OpenAI API | Content submitted to those features. That can include text and, where the feature supports it, images. A response is inference, not model training. | Follows the OpenAI API account. OpenAI offers regional residency to eligible customers. This register does not claim a specific residency region is enabled. | API data is not used for model training by default, unless that use is explicitly opted in. Retention follows OpenAI’s API policies, features, and account configuration, and can include a limited period for abuse monitoring. This is not a zero-retention commitment. Customer content is not necessarily deleted as soon as a response is returned. | Business data · DPA |
| Google LLC (Gemini API) | AI-powered content processing for translation and localization. The website translation function sends text to the Gemini API. | Text and instructions submitted to Gemini-powered features, including page copy that may contain personal information. The translation function reviewed sends text, not image files. | May be stored transiently in countries where Google or its agents operate, including the United States | Under Google’s paid Gemini API terms, prompts and responses are not used to improve Google’s products, and are logged for a limited period for abuse monitoring. We do not submit customer content on unpaid quota, because that quota may be used to improve Google’s products. The translation call does not enable Grounding, the File API, or zero data retention. Retention still depends on the API tier and configuration, and content is not necessarily deleted when the response is returned. | API terms · Retention |
| Verbalate Pty Ltd | Video and audio localization | Video, audio, and related text submitted for that feature | Australia and the United States, as described by Verbalate | For as long as needed to provide the localized video or audio, then deleted on the schedule in the Privacy Policy. GlotEO does not authorize use of that content to train AI models unless you give separate, explicit permission. | Privacy · Terms |
| Cloudflare, Inc. | Hosting and delivery of the public marketing website | Request data needed to serve gloteo.com | Cloudflare’s global network, including the United States | As described in Cloudflare’s policies for the hosting service | Privacy |
| Resend | Delivery of contact-form email | Name, email address, and the message you send | United States | As needed to deliver the message and troubleshoot delivery | Privacy |
| Google LLC (Tag Manager and Analytics) | Marketing-site measurement, only after you accept analytics cookies | Device and usage data described in the Privacy Policy cookie section | United States and other Google locations | According to the analytics retention settings for the property | Privacy |
Payments
When you pay for a subscription, card details are collected by the payment provider shown at checkout. GlotEO does not store full card numbers. We will add that provider to this register when it is connected.
Image localization
Image localization uses the translation providers listed above unless this register names a separate media provider. We will update this page before a new media provider processes customer images.
Related: Security · Privacy Policy · Data Processing Addendum · Terms