This page lists the third-party providers that Klinworks, LLC ("Klinworks," "we," "us"), a Delaware (United States) limited liability company, file no. 10704723, with its registered office at 131 Continental Drive, Suite 305, Newark, Delaware 19713, uses to deliver the Agent CEO service (the "Service").
It is relevant to every user of the Service and, in particular, to customers who have signed a Data Processing Agreement ("DPA") with us. It is the list referred to by the Privacy Policy and the DPA.
1. What a subprocessor is
A subprocessor is a company we engage to process personal data on our behalf while we provide the Service to you: for example, the company that hosts the database, processes payments, or runs the language models your agents use.
They do not decide what the data is used for: they process it only for the specific task we assign to them.
2. All of them process data under contract
Each active subprocessor processes data under a contract that requires it to:
- Use the data only to provide its service to us, never for its own purposes.
- Protect the data with appropriate security measures.
- Maintain data protection obligations equivalent to ours.
With language model providers, we additionally contract that they will not use the data we send them on your behalf for training (Privacy Policy §4.1).
3. The current list
| Provider | Purpose | Data location |
|---|---|---|
| Cloudflare | Hosting of this website, delivery network, protection and the waitlist database | Global (distributed network) |
| Supabase | App database, authentication and storage | United States |
| Stripe | Payment processing | United States |
| Resend | Transactional email delivery (sender agentceo.io) | United States |
| OpenRouter | Routing requests to the language models that run the agents | United States |
| OpenAI | Language models | United States |
| Google (Gemini) | Language models | United States |
| Anthropic | Language models | United States |
| xAI | Language models | United States |
| Deepgram | Speech-to-text transcription | United States |
| ElevenLabs | Voice synthesis | United States / European Union [PENDIENTE verify] |
| Meta (WhatsApp Business Platform) | WhatsApp messaging your agents use with your customers | United States / European Union [PENDIENTE verify] |
No third-party analytics or monitoring. We do not use external analytics or error-tracking providers. If we ever add one, we will follow the notice procedure in section 4.
4. How we give notice of changes
When we add a new subprocessor that processes personal data, or materially change what we use an existing one for:
- We will update this page and the date at the top.
- If you have a DPA with us, we will also notify you with the advance notice set out in the DPA: [PENDIENTE: days of advance notice, e.g., 30], before the new subprocessor begins processing your data.
We recommend reviewing this page periodically.
5. Your right to object
If you have a DPA and object to a new subprocessor on reasonable grounds related to data protection, write to us at privacidad@klinworks.com within the notice period explaining the reason.
We will seek a solution in good faith: for example, preventing that provider from processing your data or offering you an alternative. If that is not possible, you may cancel the affected Service in accordance with the Terms of Service (§9.1).
6. Where data is processed
Klinworks is located in the United States, and most subprocessors process data there. The safeguards for international transfers are explained in the GDPR and CCPA Notice (§4) and in the DPA.
Contact
Klinworks, LLC 131 Continental Drive, Suite 305 Newark, Delaware 19713, United States Delaware file no. 10704723
- Privacy and subprocessor objections: privacidad@klinworks.com
- Legal matters and DPA: legal@klinworks.com