AiMingle, s.r.o. provides its Service (referred to here as “Am I Cited”) to You through its website located at *.amicited.com (URL of your account).
AiMingle, s.r.o. uses certain subprocessors to assist it in providing the Am I Cited Service.
What is a subprocessor:
A subprocessor is a third party data processor engaged by Am I Cited, who has or potentially will have access to or process Service Data (which may contain Personal Data). Am I Cited uses various types of sub-processors to perform different functions as explained in the tables below.
Due diligence:
Am I Cited undertakes to use a commercially reasonable selection process by which it evaluates the security, privacy and confidentiality practices of proposed subprocessors that will or may have access to or process Service Data.
Contractual safeguards:
Am I Cited requires its subprocessors to satisfy equivalent obligations as those required from Am I Cited (as a Data Processor) as set forth in Am I Cited’s Data Processing Agreement (“DPA”), including but not limited to the requirements to:
– process Personal Data in accordance with data controller’s (i.e. Subscriber’s) documented instructions (as communicated in writing to the relevant subprocessor by Am I Cited);
– in connection with their subprocessing activities, use only personnel who are reliable and subject to a contractually binding obligation to observe data privacy and security, to the extent applicable, pursuant to applicable data protection laws;
– provide regular training in security and data protection to personnel to whom they grant access to Personal Data;
– implement and maintain appropriate technical and organizational measures;
– promptly inform Am I Cited about any actual or potential security breach; and cooperate with Am I Cited in order to deal with requests from data controllers, data subjects or data protection authorities, as applicable.
This policy does not give Customers any additional rights or remedies and should not be construed as a binding agreement. The information herein is only provided to illustrate Am I Cited’s engagement process for subprocessors as well as to provide the actual list of third party subprocessors as of the date of this policy (which Am I Cited may use in the delivery and support of its Services).
If you are an Am I Cited customer and wish to enter into our DPA, please email us at support@flowhunt.io .
Client-specific Subprocessors (infrastructure subprocessors)
Am I Cited owns or controls access to the infrastructure that Am I Cited uses to host Service Data submitted to the Services, other than as set forth below. Currently, the Am I Cited production systems for the Services are located in co-location facilities in the United States and Europe.
Customer accounts are established in one of these regions based on where the Customer is located; the Customer’s Service Data subsequently remains in that region unless agreed between Customer and Am I Cited, but may be shifted among data centers within a region to ensure performance and availability of the Services. The following table describes the countries and legal entities engaged in the storage of Service Data by Am I Cited.
| Service | Description |
|---|---|
| Servers | AWS eu-central-1 Frankfurt Am I Cited servers are hosted at Tier III+ or IV or PCI DSS, SOC 1, SOC 2, or ISO 27001 compliant facilities. Data center facilities are powered by redundant power, each with UPS and backup generators. |
| Backups | Amazon AWS S3 Service Data backups are stored securely on Amazon AWS S3 for 30 days. |
| Embedding Service | GCP eu-west-1 Used for generating embeddings for knowledge base content. This service is not configurable by the user. |
Vendor Subprocessors
Am I Cited uses certain vendor subprocessors to assist in providing the Am I Cited Service. In order to provide relevant functionality, these subprocessors may access Service Data.
| Entity | Country | Service |
|---|---|---|
| AiMingle, s.r.o. | Czech Republic | Processor - Services AiMingle, s.r.o. is a Quality Unit member entity. AiMingle, s.r.o. functions as a processor to provide the Am I Cited Service. |
| Quality Unit, s.r.o. | Slovakia | Other subprocessor - Services Quality Unit, s.r.o. is a Quality Unit member entity. Quality Unit s.r.o functions as a subprocessor providing certain infrastructure, billing, and support services for the Am I Cited platform. |
| Quality Unit, LLC | United States | Other subprocessor - Services Quality Unit, LLC is a Quality Unit member entity. Quality Unit, LLC functions as a subprocessor to provide the Am I Cited Service. |
| Quality Unit Ukraine, LLC | Ukraine | Other subprocessor - Services Quality Unit Ukraine functions as a subcontractor to provide the Am I Cited Service. |
| Makara Partner, s. r. o. | Slovakia | Our accounting may access Service Data in order to create and process invoices. |
| Stripe, Inc. | United States | Payments Payment and bank card details are securely stored and processed on Stripe. Refer to Stripe’s Privacy Policy for further details. |
| Google LLC | United States | Analytics & attribution Google Analytics 4 (website analytics), Google Ads Enhanced Conversions (hashed email for conversion measurement), Google BigQuery (data warehouse for internal analytics). EU–US Data Privacy Framework. |
| Meta Platforms, Inc. | United States | Advertising measurement Meta Conversions API — hashed email transmission for advertising effectiveness measurement. EU–US Data Privacy Framework. |
| Stape, Inc. | United States | Server-side tag management Routes analytics and conversion signals to authorised platforms on AiMingle’s behalf. Does not use data for own purposes. Data Processing Agreement in place. |
Service-specific Subprocessors
Am I Cited uses certain service-specific Subprocessors to provide its Service. In order to provide relevant functionality, these subprocessors may access Service Data. The use of these AI service providers is optional and based on your configuration.
| Service | Description |
|---|---|
| OpenAI | Used optionally based on your configuration. OpenAI is only used if: - You specifically select OpenAI in your flow - You use YouTube or MP3 files without transcript to add to knowledge base - OpenAI TTS (Text-to-Speech) is used - For generating version history changes messages - If flow assistant is set to use OpenAI The use of OpenAI inside flow is based on User’s configuration and user has full control over which LLM to use. |
| Groq | Used optionally based on your configuration. Groq is only used if you specifically select it in your flow. The use of Groq inside flow is based on User’s configuration and user has full control over which LLM to use. |
| Anthropic AI | Used optionally based on your configuration. Anthropic AI is only used if you specifically select it in your flow. The use of Anthropic AI inside flow is based on User’s configuration and user has full control over which LLM to use. |
| Google Cloud Platform | Used optionally based on your configuration. Google Cloud Platform is only used if: - You specifically select Google AI in your flow - Any feature of adding knowledge source is used (data is shared with Google Embedding Model) The use of Google AI inside flow is based on User’s configuration and user has full control over which LLM to use. |
| Slack | This service will be used as a subprocessor only if the user integrates it in the dashboard and then uses it in their flow. |
| Microsoft Services | This service will be used as a subprocessor only if the user integrates it in the dashboard and then uses it in their flow. |
| Instagram/Meta | This service will be used as a subprocessor only if the user integrates it in the dashboard and then uses it in their flow. |
| Shopify | This service will be used as a subprocessor only if the user integrates it in the dashboard and then uses it in their flow. |
| HubSpot | This service will be used as a subprocessor only if the user integrates it in the dashboard and then uses it in their flow. |
Subcontractors
To ensure 24/7 customer service availability, Am I Cited works with subcontractors, who may access Service Data. All subcontractors have contracts in place and must follow security guidelines one of which is accessing such data only with prior consent of the Customer.