Bijou AISub-processors
These are the service providers that may process personal data when Bijou is used. We act as processor for our Customers and use these providers as our sub-processors. We will update this page, and email Customers, at least 14 days before adding a new sub-processor.
| Sub-processor | What for | Data involved | Location |
|---|---|---|---|
| Supabase Inc. | Database, authentication and file storage for the Bijou app | Account data, business settings, knowledge base, conversations, contacts | Singapore (ap-southeast-1) |
| MiniMax (api.minimax.io) | Primary AI model that drafts replies | Message text and the business's knowledge base text needed for the reply | Outside Malaysia (company headquartered in China) |
| Vercel Inc. | Hosts this website and its forms; AI gateway used as a fallback route to Google Gemini | Website form submissions; message text on fallback | United States / global edge |
| Google LLC | Gemini AI model (fallback); Google sign-in; Google Calendar, Gmail or Sheets only if a business connects them; Google Analytics on this website | Message text on fallback; sign-in identity; calendar/email data the business connects; website usage | United States / global |
| OpenRouter Inc. | Fallback routing to other AI models when the primary is unavailable | Message text on fallback | United States |
| Cloudflare Inc. | Fallback AI model (Workers AI) | Message text on fallback | Global network |
| OpenAI-compatible provider (OpenAI, L.L.C. when configured) | Last-resort fallback AI model | Message text on fallback | United States |
| Stripe Inc. | Subscription billing and payments | Billing contact, payment details (held by Stripe, not by Bijou) | United States / Ireland |
| Resend Inc. | Transactional email (verification, alerts) | Email address, email content | United States |
| PostHog Inc. | Product analytics on this website | Pseudonymous usage events, device and browser data | United States |
| Cal.com Inc. | Appointment booking (Bijou's own sales calls; businesses that connect it) | Name, email, phone, booking details | United States / EU |
| Telegram | Telegram channel, if a business uses it | Messages sent through the Telegram bot | Global |
| Fly.io Inc. | Backend application hosting | All data processed by the backend in transit | Singapore |
| Virtual private server provider | Backend and WhatsApp connector hosting | All data processed by the backend in transit | Details available on request |
| Langfuse (only when enabled) | AI quality tracing | Message text and AI responses | EU / United States |
Notes
- AI models. Each reply normally uses MiniMax. The other AI providers are fallbacks used only when the primary model is unavailable. We are moving customer conversations to providers whose terms exclude using API data for training, and removing free model routes.
- WhatsApp. Messages travel through WhatsApp (Meta) because that is the app your customers use; WhatsApp's own terms and privacy policy apply to it. Bijou connects as a linked device, not through the official WhatsApp Business Platform. See Terms §3.
- Payments. Card details are entered with and held by Stripe; Bijou never sees full card numbers.
- Questions or objections: gwadmin@w3jdev.com.