Sub-processors
Last updated
In short: These are the companies that handle Guftagu data on our behalf. Model providers receive the text of a message in order to answer it, and none of them are permitted to train on it.
Model providers
When you send a message, its text is sent to one of these companies so a model can answer it. Which one depends on the tier you chose and which providers are available at that moment.
None of them may train on your conversations. We use the zero-retention or no-training configuration each provider offers, and that is a contractual term, not a setting we could quietly change.
| Company | What for | What they receive | Where |
|---|---|---|---|
| OpenAI | Generating answers | Message content sent for a response | United Statescontractual safeguards |
| Anthropic | Generating answers | Message content sent for a response | United Statescontractual safeguards |
| DeepSeek | Generating answers on lower-cost tiers | Message content sent for a response | Chinacontractual safeguards |
About DeepSeek
DeepSeek is operated from China. It is materially cheaper than the alternatives, which is what makes the lower-priced plans possible in this market, and it is worth being direct about the trade-off:
- China is not covered by an adequacy decision, so this transfer relies on contractual safeguards rather than adequacy.
- Accounts with data-residency requirements are never routed to it. That is enforced in the database, not by convention.
- You can turn it off for your account in Settings. Answers may cost more credits afterwards.
Infrastructure
These companies keep the service running. They do not read your conversations, and access is limited to what the service needs to function.
| Company | What for | What they receive | Where |
|---|---|---|---|
| Resend | Sending sign-in codes, receipts and account notices | Email address and the message we send you | United Statescontractual safeguards |
| Object storage provider | Storing files you upload | Uploaded files, encrypted at rest | Contracted regioncontractual safeguards |
| Managed database and hosting | Running the service | Account records and conversation history | Contracted regioncontractual safeguards |
Changes to this list
We publish a new sub-processor here at least 30 days before it starts processing data. If you have a data processing agreement with us, we email you as well.
To be told when this page changes, write to info@guftagu.pk.
Related
- Privacy Policy — what we collect and how long we keep it
- Terms of Service