機械翻訳です。内容に相違がある場合は英語版が優先されます。
このページの内容
Service providers and sub-processors
In short
- We use a small number of service providers to run MovItaly. Most of your data stays in the EU, in Italy (AWS Milan, MongoDB Atlas EU).
- Movito, our AI companion, runs on language models that we operate ourselves. There is no third-party AI company that receives your messages, voice or memory.
- A provider is listed here only when we use it. Some are switched on only when needed, and the last column says when.
- If we add a provider that handles personal data, we update this page and its date before it goes live, and we tell users in the app where the law asks us to.
1. Who we are
Lodato Solutions LLC, a Delaware company (address: 確認中), is the controller. The providers below are our processors or, where marked, independent controllers. They act on our written instructions under a data processing agreement. Questions: 確認中. Our EU representative is 確認中. See the privacy policy for why we use data and the retention page for how long.
2. Processors
| Provider | What it does for us | Personal data involved | Region | Transfer safeguard |
|---|---|---|---|---|
| Amazon Web Services | Hosting, private encrypted storage of uploaded documents, backups, support-mail intake | All app data, uploaded documents | EU (Milan, eu-south-1); support mail in Ireland (eu-west-1) | Stored in the EU; for US support access: to be confirmed (DPF or SCCs) |
| Amazon Textract (AWS) | Reads text from uploaded documents when OCR is set to AWS | Document images and text | EU (Frankfurt, eu-central-1) | Stored in the EU |
| MongoDB Atlas | Main database | All app data | EU (Milan) | Stored in the EU; for support access: to be confirmed (SCCs) |
| Stripe | Web subscriptions, single purchases, professional payments and payouts (Stripe Connect) | Payment, billing identity | EU and US | To be confirmed (DPF or SCCs). Stripe is also an independent controller for its own fraud and identity checks |
| RevenueCat | Keeps subscription status for purchases made in the iOS and Android apps | App user id, purchase receipts | To be confirmed | To be confirmed (DPF or SCCs) |
| Brevo (Brevo SAS, France) | Sends transactional email (receipts, security, reminders) | Email address, message content | EU | To be confirmed (DPF or SCCs) |
| Expo (EAS) | Builds the apps and delivers push notifications | Push token | To be confirmed | To be confirmed (DPF or SCCs) |
| Google (Firebase Cloud Messaging) and Apple (APNs) | Deliver push notifications to Android and iOS devices | Push token, notification content | Global | Own terms as independent controllers |
| Sentry | Error monitoring, with context scrubbed of personal data | Scrubbed error context | EU project | To be confirmed |
| Cloudflare Turnstile | Bot check on sign-up and contact forms, when switched on | IP address, browser signals | Global | To be confirmed (DPF or SCCs) |
| DeepL or LibreTranslate | Optional translation of content and of text you ask to translate | Text sent for translation | EU | To be confirmed |
| Aruba (SDI intermediary) | Italian electronic invoicing for professional fees | Invoice party data | Italy | Stored in the EU |
| Slack | Internal alerts and support threads for our team; alerts are designed to carry no personal data, and a message you send to support may be relayed to a support channel | Operational metadata, support message | To be confirmed | To be confirmed (DPF or SCCs) |
3. Independent controllers
These providers decide for themselves why and how they use data, and have their own privacy notices: Apple and Google (store accounts, purchases, optional sign-in), and Stripe for the identity verification and fraud checks it runs on professionals and payers. We share only what is needed.
4. Editorial tools: no user data
Some providers only touch our editorial work. OpenAI is used for content and editorial tooling, never with data from users: no conversation, memory, voice or account data is sent. Notion holds editorial content only and is being phased out. Movito uses our own models, so there is no AI processor for what you say to Movito.
5. Changes to this list
This page shows its version and effective date at the top. When a provider is added or replaced, we publish the change here before it starts handling your data. To be told of changes, write to 確認中. If you object to a new provider and the objection is justified, you may stop using the service and ask us to delete your account.