unkrypt Amend — Service providers and processing locations
Version 1.2 — 25 October 2026.
| Provider | Role and permitted data | Locations and safeguards |
|---|---|---|
| Railway Corporation | Contracted subprocessor for hosted app/workers, PostgreSQL, original files, backups, encrypted Shopify sessions and the independent deletion journal | Configured resources: Singapore. Operator administration: Japan. Railway operations/support can involve the United States and its published onward providers. DPA executed by both parties; contractual effective date 7 October 2026, completion verified 8 October (JST). Its DPA includes processor/subprocessor roles and applicable EU SCC/UK/Swiss provisions. Daily volume backups: six days. This is not Singapore-only processing |
| JINGSHENG HENGXING TECHNOLOGY PTE. LTD (Z.AI) | Optional GLM-OCR for individually confirmed price lists with no personal information. Not authorized to receive Entrusted Personal Data under our DPA. No Shopify credentials, merchant session identifiers or original filename are included in OCR requests | API terms describe processing generally in Singapore and no retention of input/generated content in real-time API processing. Operational/security/account-record retention and all onward locations are not confirmed. We do not promise zero retention or rely on an unverified personal-data transfer arrangement. External OCR is stopped if the provider's conditions cannot support this limited use |
| Shopify | Authentication, embedded platform, authorized store API operations and app billing | Independent platform with its own merchant relationship. Its entity, locations and safeguards depend on the merchant's applicable Shopify contracts; not automatically our subprocessor for every purpose |
| Google Workspace Gmail | Minimal direct business correspondence sent and received at support@unkrypt.com, an alias of mizunoryohei@unkrypt.com. Replies may use either business address. Not an authorized document-support or Entrusted Data channel | International processing under the applicable Google Workspace terms and Google's disclosed locations; no single-country or configured data-region guarantee is made. Send contact information, store domain, non-secret support reference and a description without document content; no originals, tables, screenshots, third-party personal data or tokens. Ordinary mail is manually removed 90 days after the final response, subject to shorter applicable deletion duties and limited legal holds |
Z.AI support has referred the detailed processing questions to its business/compliance team without supplying substantive answers. This is neither confirmation of those safeguards nor proof of misconduct. The limited OCR feature remains available under the disclosed conditions. No bespoke NDA, complete onward-provider list, fixed-country guarantee or independently verified provider-wide deletion commitment has been obtained. Do not submit documents whose confidentiality or location/deletion restrictions require those assurances.
Railway's current onward-provider register identifies infrastructure, storage, delivery and operational providers. Its infrastructure entries include Google Cloud, AWS and DataPacket (US/selected region); storage entries include Wasabi and Tigris (US/EU/Singapore); delivery/observability entries include Cloudflare, Fastly and Datadog. The register covers Railway's wider services and does not mean each listed provider receives each merchant document. Railway administers those onward relationships under its DPA; its ordinary change-notice and objection periods are ten days. Our direct-provider changes and handling of onward changes are described in DPA section 3.
Document support uses time-limited, document-specific, revocable in-app grants and audited private operator access. An emailed reference grants no document access. Unexpected personal data sent to Z.AI or email is an incident to assess and contain; the upload restriction does not excuse our own duties. The operator investigates, suspends affected transmission, coordinates deletion/retention inquiries and provides legally required notifications.
Development equipment and Cloudflare development tunnels are separate from production. Installing a software library does not send content to its author. We do not use merchant documents for general-purpose model training, advertising or sale.
Sources: Railway DPA, Railway onward providers, Z.AI API privacy/DPA, Z.AI API terms, Google Workspace terms and Cloud Data Processing Addendum. Questions: support@unkrypt.com.