Trust & Compliance
Subprocessor List
Third-party services that process data on our behalf
This page lists the third-party subprocessors that Foxtcon One LLC (“FoxtInn”) engages to process personal data on behalf of our Customers. This list is maintained in accordance with GDPR Article 28 and our Data Processing Agreement.
Change Notifications
Customers are notified at least 30 days before any new subprocessor is engaged. Notifications are sent to the primary account email. Customers may object within 15 days per our DPA terms. Subscribe to updates by emailing privacy@foxtcon.com with subject “Subprocessor Notifications.”
1. Infrastructure & Hosting
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure, compute, storage, database hosting, CDN | All Customer Content including staff data, Guest Data, operational data, financial data | United States (us-east-1, us-west-2) |
2. Payment Processing
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Stripe, Inc. | Payment processing, subscription billing, invoice management | Billing name, email, billing address, payment card data (FoxtInn does not store card numbers) | United States |
3. AI Infrastructure
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| OpenAI, LLC | Large Language Model API for LALA Virtual GM features (financial analysis, natural language queries, operational insights) | Customer Content submitted to AI features only; not stored beyond the processing session; not used for model training | United States |
| Anthropic, PBC | Alternate LLM API for AI-powered features | Same as OpenAI above; routed based on feature and availability | United States |
AI Data Commitment: Both AI providers are contractually prohibited from using Customer Content for model training, fine-tuning, or any purpose beyond delivering the requested output. Data is transmitted over TLS 1.2+ and is not retained by the provider after the processing session.
4. Analytics & Monitoring
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Google LLC (Google Analytics 4) | Website analytics, usage patterns, page views | Anonymized IP addresses, device info, session data, page interactions (marketing website only) | United States |
| Microsoft Corporation (Clarity) | Session recording, heatmaps, user experience analysis | Anonymized session data, click patterns, scroll behavior; sensitive form inputs are masked | United States |
5. Marketing & Advertising
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Meta Platforms, Inc. | Meta Pixel — conversion tracking, remarketing (marketing website only) | Anonymized site visitor data, conversion events | United States |
| LinkedIn Corporation | LinkedIn Insight Tag — ad measurement, professional demographics | Anonymized visitor data, ad interaction events | United States |
| Google LLC (Google Ads) | Conversion tracking, ad attribution | Anonymized visitor data, conversion events | United States |
6. Communications & Notifications
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Google LLC (Firebase Cloud Messaging) | Push notifications for mobile app (iOS & Android) | Device tokens, notification content | United States |
| ElevenLabs, Inc. | Text-to-speech for LALA chatbot voice output | Text content for speech synthesis; no personal data | United States |
7. Subprocessor Change Log
| Date | Change | Subprocessor | Details |
|---|---|---|---|
| April 13, 2026 | Initial publication | All | First public subprocessor list published |
8. Contact
Subprocessor inquiries: privacy@foxtcon.com
Subscribe to updates: Email privacy@foxtcon.com with subject “Subprocessor Notifications”
DPA requests: privacy@foxtcon.com