Subprocessors
Effective October 26, 2026
Draft for review. This document has not yet been reviewed by a lawyer and may change before Frontal Chat opens to the public.
These companies process personal data on our behalf to provide Frontal Chat. Each is bound by a contract that limits its use of the data to providing its service to us.
1. Current subprocessors
| Company | Purpose | Data | Location | Used |
|---|---|---|---|---|
| DigitalOcean, LLC | Hosting of the application, database and backups | All service data | United States (New York) | Always |
| OpenAI, L.L.C. (OpenAI API) | Writing AI answers and correction variations; indexing knowledge and questions for search (embeddings) | Visitor messages, recent conversation history, relevant excerpts of your knowledge, your assistant instructions, your knowledge content, corrections | United States | When AI answers are on, knowledge is processed or a correction is made |
| Stripe, Inc. | Subscription payments, invoices and receipts | Billing name, email, payment details (held by Stripe), purchase history | United States | When you subscribe or buy replies |
| Resend, Inc. | Sending account and notification emails | Recipient email address and message content | United States | When email sending is enabled |
| Pusher Ltd (Pusher Channels) | Live updates in the dashboard during handoff | Conversation identifiers and new message notifications | Region of the configured Pusher cluster | When live updates are enabled |
| SiteGround Hosting Ltd | Email hosting for messages sent to our @frontalchat.com addresses | Emails you send us | Data center region of our SiteGround account | When you email us |
2. AI provider and training
We do not use your content or your visitors’ conversations to train AI models.
OpenAI is our only AI provider. Under its API data-use terms, data sent to the OpenAI API is not used to train its models unless the customer opts in, and we have not opted in. OpenAI may keep API data for up to 30 days for abuse monitoring. We send answer requests with response storage turned off. Requests made with a business’s own OpenAI key are governed by that business’s OpenAI terms.
3. Changes
We update this page before a new subprocessor starts processing personal data. Questions: privacy@frontalchat.com.