Subprocessors / AI Processing Notice

Subprocessors / AI Processing Notice

SUSTYC uses selected service providers to operate PerforaScan. These providers may process data only as needed to provide services to SUSTYC.

1. Categories of Subprocessors

We may use providers for:

• application hosting and platform infrastructure;
• cloud storage and file delivery;
• AI and machine learning analysis;
• authentication and login;
• payment processing and billing;
• email and notifications;
• analytics, security, and monitoring.

2. AI Processing

Uploaded videos, images, documents, questionnaire responses, and related metadata may be sent to AI providers to generate diagnostics, summaries, findings, recommendations, estimates, reports, and action plans.

3. Current Provider Categories

Current provider categories may include:

• Base44: application platform, authentication, backend services, and data infrastructure;
• OpenAI: AI model processing and generation;
• hosting/VPS provider: worker and workflow processing;
• Stripe: payment processing, billing, tax tools, and customer portal where enabled;
• email provider: transactional emails and notifications;
• Google or other identity providers: social login where enabled.

4. OpenAI Processing

Where OpenAI API services are used, uploaded content or derived information may be submitted to OpenAI for processing. SUSTYC does not intentionally opt in to training OpenAI models on customer data unless expressly disclosed.

5. Security and Access

Subprocessors are expected to process data only for authorized purposes and to apply reasonable security safeguards.

6. Updates

This notice may be updated as subprocessors change. Material changes may be communicated or require re-acceptance where appropriate.

This document may be updated from time to time. If material changes are made, users may be asked to accept the updated version.