Este documento existe en italiano y en inglés: aquí tienes el texto en inglés.
Versión 2026-10-22
Sub-processors
Version 2026-10-22. Providers that process personal data on behalf of Stellar Reviews customers, as set out in section 7 of the Data Processing Agreement. Any addition or replacement is notified to customers by email at least 30 days in advance.
| Provider | Service | Data location | Transfer safeguard |
|---|---|---|---|
| Apify Technologies s.r.o. (Czech Republic) | Extraction of public reviews from platforms | EU | No transfer |
| Anthropic Ireland Ltd (Ireland) | AI model (Claude) for drafts, translations and tone analysis of published replies | EU and USA | Standard Contractual Clauses; inputs and outputs kept 30 days and not used for training |
| Google Ireland Ltd (Ireland) | Storage of the daily database copy, encrypted before it is sent: Google receives only ciphertext, the key stays with the Processor | EU and USA | Data Privacy Framework and Standard Contractual Clauses |
| Neon Inc. (USA) | Managed database | EU (Frankfurt, on AWS) | Standard Contractual Clauses |
| Vercel Inc. (USA) | Hosting of the application and engine | Functions in the EU (Frankfurt); global delivery network | Data Privacy Framework and Standard Contractual Clauses |
| Functional Software Inc., "Sentry" (USA) | Error monitoring for the application and the engine: it receives the kind of error and the stage, not the content of reviews and drafts | EU (Frankfurt) | Data Privacy Framework and Standard Contractual Clauses |
| Plus Five Five Inc., "Resend" (USA) | Sign-in and notification emails | USA | Data Privacy Framework and Standard Contractual Clauses |
Independent controllers
These parties do not process data on behalf of customers, but for their own purposes:
- Link (Stripe): sells paid plans as merchant of record and processes payment and billing data under its own privacy notice.
- Google, TripAdvisor, Booking.com and the other platforms: publish the reviews and are their controllers; Stellar Reviews has no contractual relationship with them, apart from the terms of use of the official interfaces it uses for the customers who connect them (for Google, the Google Business Profile APIs).