This page lists the categories of service providers (“sub-processors”) that BeSolution Engenharia, Lda., trading as BeVantai, relies on to provide the Service and that, in that capacity, may process personal data on its behalf. It forms part of the Privacy Policy and of the data processing terms applicable to Clients.
1. How we select and oversee sub-processors
Each sub-processor is bound by contract to process data only on BeVantai’s instructions, to ensure confidentiality and to apply appropriate security measures, in accordance with Article 28 of the GDPR. Each processes only the data its function requires.
Some sub-processors are identified only by category and function. The specific identity of each provider is made available to Clients on request, under the data processing agreement.
2. List of sub-processors
| Category | Function | Processing location | Transfer mechanism |
|---|---|---|---|
| Artificial-intelligence model provider | Generation of the Concierge’s replies and of the conversation summaries; internet search when web search is enabled on the Concierge. | United States | Adequacy decision on the EU-US Data Privacy Framework; standard contractual clauses |
| Amazon Web Services (AWS) | Cloud infrastructure: hosting of the application, the database and files. | Frankfurt, Germany (European Union) | Not applicable: processing within the European Union |
| Speech-recognition service | Conversion of dictation into text, only on Concierges with dictation enabled and only when the User uses it. The audio is not retained. | European Union | Not applicable: processing within the European Union |
| Meta, through the WhatsApp Business Platform | Delivery of the messages between the User and the Concierge, on the Client’s behalf, only in WhatsApp conversations. Retention of messages for up to 30 days. | European Union and United States | Adequacy decision on the EU-US Data Privacy Framework; standard contractual clauses |
| Content delivery network and protection against attacks | Routing and protection of the Service’s traffic; processing of connection data such as the IP address. | Global network of points of presence | Adequacy decision on the EU-US Data Privacy Framework; standard contractual clauses |
| Email delivery service | Sending of transactional messages, such as password recovery, notices to Clients and notices of new requests made on the site. | European Union and United States | Adequacy decision on the EU-US Data Privacy Framework; standard contractual clauses |
| Operational alerting tool | Receipt, by the BeVantai team, of alerts about the operation of the Service. | United States | Adequacy decision on the EU-US Data Privacy Framework; standard contractual clauses |
| Business email service | Receipt of and reply to requests addressed to info@bevantai.com and privacy@bevantai.com, including proposal requests made on the site and the exercise of rights. | European Union and United States | Adequacy decision on the EU-US Data Privacy Framework; standard contractual clauses |
The Client a conversation is addressed to is not a sub-processor of BeVantai: it is the controller of its Users’ data and accesses the conversations in the dashboard and, on WhatsApp, in the WhatsApp Business app on its number.
3. Changes to the list
BeVantai notifies Clients in advance of the addition or replacement of sub-processors that process Client Data, and updates this page with the date shown at the top. Questions about this list may be addressed to privacy@bevantai.com.
Questions about this page? info@bevantai.com
See also: Privacy Policy · Terms and Conditions