Subprocessors

1. Our Subprocessors

A subprocessor is a third party we engage to help us provide Orkest, and that may process personal data on our behalf in doing so. This page lists the subprocessors we currently use.

We will update this list when we add or replace a subprocessor.

2. Current Subprocessors

• Anthropic: Processes the conversations you have with our AI assistant (Arthie), including in the public Arthie demo, to generate its responses and to derive short notes about the person we are talking with, such as their role, needs, and objections. Anthropic does not use this data to train its models.
• AWS (Amazon Web Services): Stores artwork, gallery, and other files you upload, as object storage.
• Stripe: Processes payment and billing data for purchases of Orkest credits, including the payment card details, name, email address, billing address, and any tax ID entered at checkout, to process the payment and prevent fraud; and processes card payments made through gallery payment links, including the payer's name, email address and card details, as our payment processor.
• Vercel: Hosts our web application and collects basic, aggregated visitor analytics (e.g. page views).
• Notion: Stores payout records generated from completed gallery payments, including the collector's name and email address and the email address of the gallery user who issued the invoice or payment link, for our internal finance operations.
• Filestack: Handles document uploads, including business verification documents (e.g. artwork images, CSV imports, and incorporation/bank-proof documents for KYC).
• Cloudflare (Turnstile): Checks that visitors to our public website, and sign-up and chat submissions, come from real people rather than automated bots, to prevent fraud and abuse. It processes device and connection signals, including IP address.
• Supabase: Provides our database and authentication infrastructure, and stores account, application, and business-verification (KYC) data.
• OpenAI: Creates text embeddings (numerical representations used for similarity search) of the messages you and Arthie exchange, including in the public Arthie demo; of the notes Arthie derives about you from those conversations (for example your role, needs, and objections); and of our knowledge-base content. We use these embeddings to find and retrieve relevant content while Arthie answers you. The embeddings are stored in our own database. OpenAI does not use this data to train its models.
• Jeeves: Processes stablecoin payments made through gallery payment links, where a gallery offers them, including the transaction details and wallet address.
• SendGrid (Twilio): Sends transactional email on our behalf (e.g. account, billing, and invitation emails, and invoices and payment emails to gallery buyers).
• Sentry: Receives application error reports (scrubbed of sensitive fields) to help us diagnose and fix bugs.
• Google (Google Maps Platform): Processes address text you enter to provide address autocomplete.
• Slack: Receives a gallery's name and the requester's email in an internal notification when a KYC verification request is submitted, for our internal review team.

3. Questions

If you have questions about a subprocessor on this list, contact us at privacy@orkestai.com.