Subprocessors
Last updated: 2026-06-02
This page lists the third-party services that process data on our behalf (GDPR subprocessors), with their purpose and country. Written honestly - the real state of things, not marketing.
The important part about AI and your text
- The free QA validator (used without an account) does NOT send your text to any external AI. It runs on deterministic checks and our own services.
- Conversations module. Mailboxes you connect are read live over IMAP and not stored by us: the database keeps only the fact that a reply arrived, when, and how it was classified. Your contacts are stored because you upload them. Reply text is sent to OpenRouter only while the "let AI read message content" switch is on - turn it off in settings and content never leaves our server. The spam check runs on our own server (rspamd) and is not sent anywhere.
- When you enable the AI checks (semantic, term consistency) or translate a document, the text of the relevant segments (and, for scans, the page images, for text recognition) is sent to OpenRouter, which routes it to a model provider with model training turned off - so your content is not used to train models. OpenRouter's policy: provider logging & training.
- Data is stored in the EU (Germany), on Hetzner Online GmbH infrastructure (ISO 27001).
- Auto-delete by default: for new accounts, uploaded documents and their translations are permanently deleted 30 days after upload. You can change the window or turn it off in Settings.
- We delete your data on request: help@chatscontrol.com. A Data Processing Agreement is on the DPA page.
Subprocessor list
| Subprocessor | Purpose | Country |
|---|---|---|
| Hetzner Online GmbH | Hosting, document, database and backup storage | Germany (EU) |
| OpenRouter, Inc. | AI QA checks, scan recognition and machine translation (text and scan page images are sent only for these; training disabled) | United States |
| DeBounce LLC | Email address verification in Conversations - only the address is sent, and only when you ask for it | United States |
| Mailivery (Uptimize GmbH) | Mailbox warm-up in Conversations - optional, only for mailboxes you connect | Germany (EU) |
| Telegram (Telegram FZ-LLC, Telegram Messenger Inc.) | Notifications to our team: contact requests from the website forms (the name and contact details you submitted) and document processing failures (technical metadata only, no document content or file names) | UAE / British Virgin Islands |
| Sentry (Functional Software, Inc.) | Error monitoring - metadata only, no document content | United States |
Through OpenRouter, requests may be served by third-party model providers that OpenRouter selects with training opt-out enabled. Payments are handled by a separate processor that has no access to your documents.
Changes
We will update this page and notify customers before engaging a new subprocessor, so the data controller can object (GDPR Art. 28(2)).
Questions? Email us at help@chatscontrol.com or on Telegram @mrbuslov.