Subprocessors
Effective 3 November 2026 · Version 2026-11-03.1
Contents
ALEKSEI KIM PR BEOGRAD ("Flirty") uses the providers below to run the service. Each processes personal data on our instructions and for no other purpose. This list belongs with the Privacy Policy. We update it before we start using a new provider that handles personal data, and we change the version of this page when we do.
1. Providers that receive personal data
| Provider | What it does for us | Data it receives |
|---|---|---|
| OrcaRouter, which routes requests to language-model providers | Writes her replies, extracts the short notes she remembers about you, writes the plans for what she does in a day, and reads picture frames to judge what a picture shows | Her persona card, your recent messages and her replies, remembered notes, her private notes; a picture frame for the picture check. No email, no payment data |
| Siray | Generates photos and short videos, and writes the prompts for them | Picture and video prompts written from the conversation, and the reference pictures of the persona. No email, no name |
| NOWPayments | Cryptocurrency payment processing | Amount in US dollars, our order number, return and callback links. We receive from it the status of the payment and the amount received |
| Resend | Sends email | Your email address and the text of the letter: sign-in codes, receipts, payment problems |
| Google (sign-in) | Sign-in with Google and the One Tap prompt | When you use it: your Google account and your browser's request to Google. We receive the verified email |
| Sentry (error reports), only on a server where it is switched on | Collects the errors our servers raise, so we can find and fix faults | The error and the lines of code it passed through, the service name, the path of the failed request without its query string, cookies or secret headers, and recent log lines. The software is set to send no email, name or message text and no local variables; internal account ids may appear in the log lines. Used only on a server where it is switched on. Sentry keeps reports for as long as its plan default |
| Google Cloud | Hosting of servers, databases and storage | Everything we store, encrypted in transit, under our control |
| Browser push services (Google, Mozilla, Apple, Microsoft) | Deliver a notification you switched on | The push address your browser gave us, and a short encrypted notice: the person's name and the first words of her message |
2. Providers that do not receive personal data
| Provider | What it does | Note |
|---|---|---|
| DB-IP | A free database of IP-address countries, stored inside our service (DB-IP.com) | Nothing is sent to DB-IP: your address is looked up locally and only the country code is kept |
| Let's Encrypt | Certificates for secure connections | Receives our domain names only |
| GitHub | Our code and builds | No user data |
3. What we do not use
No advertising network, analytics provider, social-media pixel, customer-chat widget, session-recording tool or age-verification provider is used today. If that changes, this list and the Cookie and Measurement Notice change first.
4. Locations and safeguards
Our own systems run in Europe. Some providers (for example the language-model and image providers) may process data outside the UK and the EEA, including in the United States. For those transfers we use the safeguards the law accepts, such as adequacy decisions and standard contractual clauses.
5. Contact
Questions about a provider, or a wish to object to one: support@flirty.club.