Alumia

Legal

Subprocessors

To run the Service, Alumia engages the third party vendors below to process personal data on our behalf. Each is bound by contract to process data only on our instructions and to protect it. This page is the notice referenced in our Privacy Notice and our Data Processing Addendum.

  1. Amazon Web Services, Inc. Purpose: hosting, database, file storage, and email delivery and receipt (Amazon SES). Data: account data, content you submit, usage metadata, email messages. Location: United States (us-east-1).
  2. Cloudflare, Inc. Purpose: network routing and traffic protection. Data: request metadata including IP address, and the traffic it routes. Location: global edge network.
  3. Stripe, Inc. Purpose: payments, from the moment checkout opens. Data: payment and billing details, email address, billing address, order identifiers. Location: United States / Ireland.
  4. OpenRouter, Inc. Purpose: AI gateway: routes prompts and content to the model provider serving the request. Data: prompts, content you submit, request metadata. Location: United States.
  5. Model providers enabled for the product, and, for open-weight models, the third-party inference hosts that OpenRouter uses to serve them (for example BaseTen). Purpose: generating the AI responses. Data: prompts and content you submit. Location: each provider or host in its own jurisdiction, recorded per request. In the United States: OpenAI, Anthropic, Google, NVIDIA, xAI. In their own jurisdictions: Alibaba (Qwen), DeepSeek, MiniMax, Moonshot AI.

Third-party analytics and tracking: none.

Changes to this list

We will update this page when we add or remove a subprocessor. Under our Data Processing Addendum, customers may ask to be notified of changes so they have the opportunity to object before a new subprocessor begins processing their data. The inference hosts in entry 5 are selected by OpenRouter for each request and can change without individual notice; their providers and jurisdictions are as described above.

Contact

Questions about our subprocessors? Contact us. See also our Privacy Notice.