AiMingle, s.r.o. provides its Service (referred to here as “Am I Cited”) to You through its website located at amicited.com and the Am I Cited application, which runs on the FlowHunt platform at app.flowhunt.io.
AiMingle, s.r.o. uses certain subprocessors to assist it in providing the Am I Cited Service.
What is a subprocessor:
A subprocessor is a third party data processor engaged by Am I Cited, who has or potentially will have access to or process Service Data (which may contain Personal Data). Am I Cited uses various types of sub-processors to perform different functions as explained in the tables below.
Due diligence:
Am I Cited undertakes to use a commercially reasonable selection process by which it evaluates the security, privacy and confidentiality practices of proposed subprocessors that will or may have access to or process Service Data.
Contractual safeguards:
Am I Cited requires its subprocessors to satisfy equivalent obligations as those required from Am I Cited (as a Data Processor) as set forth in Am I Cited’s Data Processing Agreement (“DPA”), including but not limited to the requirements to:
– process Personal Data in accordance with data controller’s (i.e. Subscriber’s) documented instructions (as communicated in writing to the relevant subprocessor by Am I Cited);
– in connection with their subprocessing activities, use only personnel who are reliable and subject to a contractually binding obligation to observe data privacy and security, to the extent applicable, pursuant to applicable data protection laws;
– provide regular training in security and data protection to personnel to whom they grant access to Personal Data;
– implement and maintain appropriate technical and organizational measures;
– promptly inform Am I Cited about any actual or potential security breach; and cooperate with Am I Cited in order to deal with requests from data controllers, data subjects or data protection authorities, as applicable.
This policy does not give Customers any additional rights or remedies and should not be construed as a binding agreement. The information herein is only provided to illustrate Am I Cited’s engagement process for subprocessors as well as to provide the actual list of third party subprocessors as of the date of this policy (which Am I Cited may use in the delivery and support of its Services).
If you are an Am I Cited customer and wish to enter into our DPA, please email us at support@flowhunt.io.
Client-specific Subprocessors (infrastructure subprocessors)
Am I Cited owns or controls access to the infrastructure that Am I Cited uses to host Service Data submitted to the Services, other than as set forth below. The Am I Cited production systems are hosted on Amazon Web Services and Google Cloud Platform in the European Union. The following table describes the infrastructure engaged in the storage and processing of Service Data by Am I Cited.
| Service | Description |
|---|---|
| Servers | Amazon Web Services, eu-central-1 (Frankfurt) Am I Cited servers are hosted at Tier III+ or IV or PCI DSS, SOC 1, SOC 2, or ISO 27001 compliant facilities. Data center facilities are powered by redundant power, each with UPS and backup generators. |
| Backups | Amazon AWS S3 Service Data backups are stored securely on Amazon AWS S3. |
| Data warehouse | Google BigQuery, europe-west3 (Frankfurt) Stores monitoring results, citations, and data imported from connected platforms. Google Analytics exports that Am I Cited hosts at a customer’s request are stored in the BigQuery EU multi-region. |
| Embedding Service | Google Vertex AI, europe-west3 (Frankfurt) Used for generating text embeddings of prompts, search queries, and page content for semantic analysis. This service is not configurable by the user. |
Vendor Subprocessors
Am I Cited uses certain vendor subprocessors to assist in providing the Am I Cited Service. In order to provide relevant functionality, these subprocessors may access Service Data.
| Entity | Country | Service |
|---|---|---|
| AiMingle, s.r.o. | Czech Republic | Processor - Services AiMingle, s.r.o. is a Quality Unit member entity. AiMingle, s.r.o. functions as a processor to provide the Am I Cited Service. |
| Quality Unit, s.r.o. | Slovakia | Other subprocessor - Services Quality Unit, s.r.o. is a Quality Unit member entity. Quality Unit s.r.o functions as a subprocessor providing certain infrastructure, billing, and support services for the Am I Cited platform, including the LiveAgent customer support platform. |
| Quality Unit, LLC | United States | Other subprocessor - Services Quality Unit, LLC is a Quality Unit member entity. Quality Unit, LLC functions as a subprocessor to provide the Am I Cited Service. |
| Quality Unit Ukraine, LLC | Ukraine | Other subprocessor - Services Quality Unit Ukraine functions as a subcontractor to provide the Am I Cited Service. |
| Makara Partner, s. r. o. | Slovakia | Our accounting may access Service Data in order to create and process invoices. |
| Stripe, Inc. | United States | Payments Payment and bank card details are securely stored and processed on Stripe. Refer to Stripe’s Privacy Policy for further details. |
| Amazon Web Services | Infrastructure in the EU (see above) | Hosting and backups Servers and backups for the Am I Cited Service. AI model processing through Amazon Bedrock is described separately below. |
| Google Cloud Platform | Infrastructure in the EU (see above) | Data warehouse and embeddings Google BigQuery and Google Vertex AI embeddings, as described above. |
| Mailchimp Transactional (Mandrill, an Intuit service) | United States | Transactional email Sends service emails such as monitoring alerts, digests, and workspace invitations. Receives recipient email addresses and email content. Privacy Policy |
| Google LLC | United States | Website analytics & attribution Google Analytics 4 (website analytics), Google Ads Enhanced Conversions (hashed email for conversion measurement), Google BigQuery (data warehouse for internal analytics). EU–US Data Privacy Framework. This processing concerns visitors and registered users of Am I Cited, not data obtained from Google integrations you connect. |
| Meta Platforms, Inc. | United States | Advertising measurement Meta Conversions API — hashed email transmission for advertising effectiveness measurement. EU–US Data Privacy Framework. |
| Stape, Inc. | United States | Server-side tag management Routes analytics and conversion signals to authorised platforms on AiMingle’s behalf. Does not use data for own purposes. Data Processing Agreement in place. |
Service-specific Subprocessors (AI and data providers)
Am I Cited uses the following service-specific subprocessors to provide its Service. Some of them are used automatically by Am I Cited features, by default settings, or by routing rules, including fallback to another provider; others are used only when you select a model or enable a feature. The table lists the company that actually receives the data. Where a provider routes requests to model providers, the downstream recipients are described in the same row. Provider retention and deletion conditions vary by service and configuration; processing a request is distinct from using its content for model training.
| Provider | Purpose and data | When it is used | Location and terms |
|---|---|---|---|
| DataForSEO OÜ | Collects answers from ChatGPT, Google Gemini, Google AI Overviews, and Google AI Mode for AI answer monitoring, and provides keyword, AI search volume, ranking, and backlink data. Receives the text of tracked prompts with the selected location and language, keywords, and domains. ChatGPT and Gemini answers are collected through DataForSEO, not by Am I Cited calling OpenAI or Google directly. | Automatically, for each monitored prompt where these engines are enabled, and for keyword and backlink reports. | Estonia. Privacy Policy |
| Perplexity AI | Answers tracked prompts for Perplexity monitoring. Am I Cited submits the text of tracked prompts to Perplexity’s public website using automated browsers. | Automatically, for each monitored prompt where Perplexity is enabled. | United States. Privacy Policy |
| Oxylabs | Proxy network used by the automated browsers that collect Perplexity answers. Requests, including the text of tracked prompts, pass through its network. | Automatically, together with Perplexity monitoring. | Privacy Policy |
| Anthropic, PBC | Claude answer monitoring through Anthropic’s API, with Anthropic’s web search and web fetch tools. Receives the text of tracked prompts. Also processes Claude models that are not served through Amazon Bedrock when you select them in the reports chat or when they are used by a generation feature. | Automatically for Claude monitoring on plans that include it; otherwise when the model is selected. | United States. Privacy Policy, Data Processing Addendum |
| xAI | Grok answer monitoring through the xAI API, with xAI’s web search tool. Receives the text of tracked prompts and returns the answer and cited sources. Tracked prompts are free text that you write, so they may contain any information you include. | Automatically for Grok monitoring on plans that include it. | United States. Privacy Policy |
| OpenRouter, Inc. | Routes requests to AI model providers. Used for: - DeepSeek answer monitoring, with OpenRouter’s web search feature, which uses a third-party search provider (tracked prompts) - Detecting brands and sentiment in AI answers (answer text) - Prompt suggestions (text of the web page you enter) - Naming topic clusters (prompts and page titles) - Search intent, page type, and topic classification, as an intermediary for TypeSafe and as a fallback (query text, including Google Search Console queries and Google Ads keywords and search terms, tracked prompts, related queries, and page addresses) - The default reports chat models (questions and the report data needed to answer them, which may include data from connected platforms such as Google) - Other models served through OpenRouter that you select or that a generation feature uses The downstream recipient depends on OpenRouter’s routing for the model, and may be the model developer (for example DeepSeek or Z.ai) or another inference provider hosting the model. | Automatically for the features above, and when you select a model served through OpenRouter. | United States. Terms (section 10.2 incorporates the Data Processing Agreement for business use), Privacy Policy |
| Typesafe AI, Inc. | Classifies the search intent of queries and the type of pages and topics. Receives query text, including Google Search Console queries and Google Ads keywords and search terms, tracked prompts, related queries, and page addresses with limited page text. Requests are sent directly or through OpenRouter. | Automatically, when data is imported from connected platforms and when prompts are monitored. | United States. Privacy Policy |
| Google Cloud Platform (Vertex AI and Gemini) | Generates text embeddings of prompts, search queries, page content, and link anchor text (see the infrastructure table above). Also processes Google Gemini models when you select them in the reports chat or when they are used by a generation feature. | Automatically for embeddings; otherwise when a Gemini model is selected. | EU for embeddings (europe-west3, Frankfurt). Data Processing Addendum |
| Amazon Web Services (Amazon Bedrock) | Processes Anthropic Claude models through Amazon Bedrock, including the default model of the reports chat when it is used through the API. Receives questions, instructions, and the report data needed to answer them, which may include data from connected platforms such as Google. This is separate from the hosting and backups described above. | When a Claude model served through Amazon Bedrock is selected or used by default. | EU (eu-central-1, Frankfurt, using EU cross-region inference). Amazon Bedrock data protection, AWS Data Processing Addendum |
| OpenAI | Processes OpenAI models when you select them in the reports chat or when they are used by a generation feature, including image generation for articles. Also receives campaign, audience, and conversion data that you send through the ChatGPT Ads integration when you connect it. | When an OpenAI model is selected or used by a generation feature, and when you use the ChatGPT Ads integration. | United States. Privacy Policy, Data Processing Addendum |
| Groq LLC | Processes the open-weight GPT-OSS models when you select them in the reports chat or when they are used by a generation feature. Receives the prompts, instructions, and context sent to the model. | When a GPT-OSS model is selected or used by a generation feature. Not used by the default Am I Cited features. | United States. Privacy Policy |
| Replicate, LLC | Generates images for articles. Receives image prompts and any reference images used for the article. | When article image generation uses a model served by Replicate. | United States. Privacy Policy |
| Serper | Google search results used to identify brands mentioned in AI answers. Receives brand names as search queries. | Automatically, when brand detection needs additional context. | Privacy Policy |
| Platforms you connect | Google Search Console, Google Analytics 4, Google Ads, Bing Webmaster Tools, Microsoft Advertising, Meta Ads, LinkedIn Ads, ChatGPT Ads, Shopify, WooCommerce, Magento 2, Shoptet, BiznisWeb, and Slack. Am I Cited reads data from these platforms and performs the actions you request. | Only when you connect the platform. | See the Privacy Policy for how connected platform data, including Google user data, is handled. |
The free tools on amicited.com send the brand, website, or prompt that a visitor enters to DataForSEO, Perplexity (through Oxylabs), and OpenRouter to produce the requested report.
Subcontractors
To ensure 24/7 customer service availability, Am I Cited works with subcontractors, who may access Service Data. All subcontractors have contracts in place and must follow security guidelines one of which is accessing such data only with prior consent of the Customer.