External Processors and Transfers
Categories of service provider used by AiActs (aiacts.ai), operated by Aimperia LLC, Georgia. You may ask us to name the specific provider in any category by writing to hello@aiacts.ai.
| Provider | Status | Purpose | Data | Location |
|---|---|---|---|---|
| Hosting provider | active | Application hosting, database, storage, static files | Account data, assessment inputs, reports, logs | Georgia |
| Hostinger (SMTP) | active | Registration, password reset, transactional email | Email address, one-time tokens, message metadata | EU |
| DeepSeek API | active | Generation of report text | Only the facts required for the report. No payment data and no account credentials are sent. | Third country |
| Paddle.com | active | Merchant of Record: checkout, invoicing, tax, refunds | Billing identity, payment data | United Kingdom |
| Google Tag Manager / Google Analytics | consent-gated | Optional analytics | Cookie and device identifiers, usage events. Not loaded until you consent. | EU / US |
| Application logging | active | Security, diagnostics, audit trail | IP address, user id, endpoint, user agent, security events | Georgia, on the hosting infrastructure |
| Support mailbox | active | Support, complaints and privacy requests | Email address, message content, attachments you send | EU |
| CDN provider | not used | — | — | — |
Paddle
Paddle is not our processor. As Merchant of Record it sells the subscription to you and acts as a separate controller of payment data under its own terms and privacy policy. We do not receive your full card number or security code.
Transfers outside Georgia
We transfer personal data only where the transfer is necessary to deliver the service you have asked for, or where you have consented to it, and we keep each transfer to the minimum the purpose requires.
Report generation involves a provider located in a third country. Sending the facts of your assessment there is necessary to produce the report you requested. Only those facts are sent: no account credentials and no payment data. If you would rather not send information about identifiable people, enter descriptions that identify no individual; the assessment works without them.
Transactional email and support are handled within the EU. Optional analytics involve a transfer only after you consent, and you can refuse or withdraw that consent without losing access to the service.
Transfers to third parties are logged internally and the log is retained under the Retention Policy.
Review and changes
This register is updated before a new provider is activated. Optional analytics stay disabled until you consent.