Subprocessors and recipients

Active beta providers

• Hostinger — VPS selected in Frankfurt, Germany; hosts Coolify, the bot, website, and PostgreSQL. Data: application data and minimized technical logs. Retention follows the privacy policy and contract duration.
• Infomaniak Network SA — Swiss Backup — Switzerland; encrypted PostgreSQL backups through S3-compatible storage. Configured retention: 30 days.
• Proton AG — Proton Mail — Switzerland; hosts the @arcoz.dev addresses used for support, abuse reports, and rights requests. Emails are encrypted at rest; Proton Mail servers are located in Switzerland, Germany, or Norway, and backups may be retained for up to 30 days.
• Discord — platform needed to receive events and publish threads. Discord acts under its own terms and may process identifiers, messages, and interactions supplied by its users.
• Linked websites — occasional recipients in URL Title mode or when Media mode needs a page title. They receive the server IP and ordinary network data, but no Discord identifier, cookie, or secret.
• Sentry — European region; filtered technical error and log monitoring plus operational/runtime metrics without raw Discord identifiers, after message content, URLs, prompts, images, attachments, tokens, and secrets are systematically removed.

Providers not yet used

• Mistral AI — the integration has not been implemented yet and no message is currently sent to it. Mistral may become a subprocessor during the beta after the notices and required checks are updated.
• Stripe — not integrated during the beta; Premium is managed manually and no payment is accepted.

Production use of a provider requires review of its data-processing terms, location, security measures, retention, and downstream subprocessors. Material changes to this list receive a dated update.