Sub-processors

A sub-processor is a third-party vendor that may process personal data on GuruMood's behalf to help us deliver our services. This page lists our active sub-processors, their purpose, primary location, and a link to their privacy policy. All of them are bound by written contracts containing data-protection clauses equivalent to GuruMood's Data Processing Addendum (DPA).

We notify active Customers at least 30 days in advance of any new sub-processor or material change, via the DPA contact email. Customers may object on reasoned grounds in line with their DPA.

• Amazon Web Services (AWS) — application hosting, compute, storage, and databases. EU and US regions. Privacy policy: https://aws.amazon.com/privacy/
• DigitalOcean — application hosting, compute, and storage. EU and US regions. Privacy policy: https://www.digitalocean.com/legal/privacy-policy

• OpenAI — language and voice model APIs powering agent reasoning. United States. Privacy policy: https://openai.com/policies/privacy-policy
• Anthropic — language model APIs (Claude family) powering agent reasoning. United States. Privacy policy: https://www.anthropic.com/legal/privacy
• Google (Gemini / Vertex AI) — language model APIs powering agent reasoning. EU and US regions. Privacy policy: https://policies.google.com/privacy
• OpenRouter — model routing gateway between AI providers. United States. Privacy policy: https://openrouter.ai/privacy

We do not use Customer or end-user data to train foundation models. The providers above apply their own zero-retention or no-training policies on their enterprise APIs — see their linked policies.

• Meta Platforms, Inc. (WhatsApp Business Cloud API) — outbound and inbound message delivery for WhatsApp agents. Ireland (EU) / United States. Privacy policy: https://www.whatsapp.com/legal/privacy-policy

In addition to the named sub-processors above, we may use vendors in the following categories. Specific vendor names are available on request and will be published here as services move into production:

• Voice and SMS communications (CPaaS) — call and SMS routing for voice agents.
• Transactional email — sending service notices, password resets, and privacy@ replies.
• Product and web analytics — aggregated metrics and product improvement.
• Help desk and support — ticketing and customer communications.
• Payments — billing, subscriptions, and reconciliation.

We keep this list up to date. To subscribe to change notifications or to submit a reasoned objection to a new sub-processor, write to privacy@gurumood.com with your organization's name.

For any question about our sub-processors, contact privacy@gurumood.com.