Sub-processors

About this list

This page lists the categories of sub-processors used by the NovixOne platform, to assist merchants in fulfilling their disclosure obligations under data protection laws.

For commercial confidentiality, competitive, and security reasons, we do not publicly disclose the specific corporate names of individual sub-processors. We consider category-level disclosure to satisfy the disclosure requirements of the Personal Data (Privacy) Ordinance (Cap. 486) and general international data protection standards (including GDPR Art. 28(2)).

Enterprise customers with special compliance requirements may make a written request to contact@novixone.ai for further disclosure under a non-disclosure agreement, which we may grant at our discretion.

Sub-processor Categories

• Cloud database and storage services: Stores merchant accounts, business data, conversations, orders, and media files. Region: Asia Pacific / United States. Data categories: merchant data, end customer conversations, media.
• Application hosting and edge computing services: Runs the Platform front-end and back-end. Region: global edge nodes. Data categories: request metadata, transient conversation content.
• Large language model (AI) inference services: Generates AI replies, extracts customer memories and signals. Region: United States / Europe. Data categories: conversation content. Providers may not use for model training.
• Messaging gateway services: Receives and sends WhatsApp and LINE messages. Region: United States / Ireland / Japan. Data categories: phone numbers or messaging-app user IDs, conversation content, media.
• Payment processing services: Processes merchant subscriptions, credit pack purchases, and merchant-to-customer payments (Stripe Connect). Region: United States. Data categories: merchant billing data, payment metadata. We do not directly store credit card data.
• Background job and caching services: Processes message queues, quota calculations, transient data, and deduplication. Region: United States. Data categories: conversation metadata, transient content.
• Error monitoring and performance tracking services: Tracks system errors and performance. Region: United States / Europe. Data categories: error logs (no personal data), technical metadata.
• Push notification services: Sends business notifications to merchant devices. Region: global. Data categories: merchant device tokens, notification titles.
• Email services: Sends transactional and service notification emails. Region: United States / Europe. Data categories: merchant email addresses, notification content.
• Authentication services: Handles merchant login and identity verification. Region: Asia Pacific / United States. Data categories: merchant emails, login credentials, session tokens.

Updates and Notifications

We may add, change, or remove sub-processors at our sole discretion at any time. Material additions will be updated on this page and take effect immediately upon update.

We do not send individual change notifications to merchants. Merchants are responsible for periodically reviewing this page to learn the latest list.

Continued use of the Platform constitutes the merchant's consent to the updated sub-processor list. A merchant's sole remedy for objecting to any sub-processor is to terminate use of the Platform.

Contact

For any questions regarding the sub-processor list, please contact contact@novixone.ai.