Subprocessors

Effective Date: August 20, 2025

Glinto, operated by XSTIR L.L.C., uses certain third-party service providers to help us deliver our services. These providers act as subprocessors, meaning they process customer data on our behalf under strict contractual and data protection obligations.

We ensure that all subprocessors comply with applicable privacy and security standards, including the EU General Data Protection Regulation (GDPR).

---

Current Subprocessors

1. OpenAI, L.L.C.

• Location: United States

• Purpose: AI-based invoice text extraction and data processing

• Safeguards: Data Processing Agreement (DPA) with Standard Contractual Clauses (SCCs). Data is not used for model training.

2. DigitalOcean, LLC

• Location: Amsterdam, Netherlands (AMS3 Region)

• Purpose: Cloud hosting and storage (Droplets, Spaces, databases)

• Safeguards: GDPR-compliant DPA. Data stored within the EU.

---

Future Subprocessors

As Glinto evolves, we may engage additional subprocessors (e.g., accounting integrations like QuickBooks, email/WhatsApp services). Any updates will be reflected on this page.

---

Questions

If you have questions about our subprocessors or data protection practices, please contact us:

XSTIR L.L.C.
Kulla e Zotnis, 40
Prishtinë, Kosovo
Phone: +383 45 645 305
Email: info@glinto.io