These are the third parties that process personal data in Customer Data for Kyōsey AI, under our Data Processing Agreement. Each is bound by written data protection terms at least as protective as ours. We tell customers at least 30 days before adding or replacing one (DPA, section 5).
The platforms you connect yourself, such as Google Ads, Microsoft Advertising, Meta, TikTok, Shopify or ChatGPT Ads, are not on this list: Kyōsey reads from them, and acts in them, on your instruction, and they process that data under your own agreements with them. The same goes for the calendar, email and files a person allows for themselves (Google Calendar, Gmail and Google Drive, or Outlook’s calendar and mail and OneDrive through Microsoft Graph), which Kyōsey uses only when they ask (Privacy Policy, section 2).
| Subprocessor | What it does for Kyōsey | Personal data involved | Where |
|---|---|---|---|
| Anthropic, PBC | The AI model (Claude) that writes Kyōsey’s answers, reports and drafts | What a conversation contains: your messages and files, and the data Kyōsey reads from your connected platforms to answer them; the chats Kyōsey reads to find work for your business’s Priorities | United States |
| Google LLC (Gemini API) | Makes and edits pictures when you ask Kyōsey for one | Your request and any picture you attach | United States |
| TypeSafe | Reads a chat message to suggest which Kyōsey expert should take it | The text of the message | To confirm |
| Stripe, Inc. | Payments, invoices, the wallet’s top-ups and refunds, and tax calculation | Billing name, email, address and tax details; card details, which Stripe holds and we never see | United States |
| Twilio Inc. | Sends sign-in codes by text message, where you sign in with a phone number | Phone number and the code | United States |
| Google LLC (Google Workspace) | Email for support and account messages | Your messages to us and our replies | United States |
| Data center operator | Hosts the servers Kyōsey runs on (physical hosting only: no access to the data) | None directly: the servers and their encrypted storage | To confirm |
Also used, for this website and sign-in rather than for Customer Data: Google Cloud (App Engine, hosting this website, United States) and Google reCAPTCHA (protecting the client portal’s sign-up from bots, United States), and Google Analytics (measuring visits to this website, with consent where the law requires it, United States).
Changes
| Date | Change |
|---|---|
| 2026-10-27 | The calendars, email and files people allow for themselves (Google, and Microsoft through Graph) are named among the platforms you connect, which are not subprocessors. No subprocessor added. |
| 2026-10-15 | First published. |
To be told about changes by email, make sure the owner of your Kyōsey account uses an address you read. Questions: privacy@kyosey.com.