| Sub-Processor | Purpose | Data Processed | Location | Consumer Health Data Access |
|---|---|---|---|---|
| Google LLC (Vertex AI / Gemini) | AI model inference — generates personalized chat responses using Gemini 2.5 Flash and creates 768-dimensional vector embeddings using text-embedding-004 | Chat messages, shopper context, memory data (for inference only — Zero Data Retention enabled) | USA | Yes |
| Google LLC (Cloud SQL) | Managed PostgreSQL database with pgvector extension for persistent data and vector storage | All merchant data, end user data, memory embeddings, chat logs | USA | Yes |
| Google LLC (Cloud Run) | Serverless compute and API hosting | All data in transit during processing | USA | Yes |
| Zoho Corporation (ZeptoMail) | Transactional email delivery, including support routing, billing notifications, and Contact Form Mode submissions | Recipient email, sender email, message content (transient — 90-day retention) | USA | No |
| Clerk Inc. | Merchant authentication and session management | Merchant login credentials, session tokens | USA | No |
| Stripe Inc. | Payment processing and billing for merchants subscribing through memoizeai.com | Merchant billing information (payment card numbers handled by Stripe; MEMOIZE AI LLC does not store card data) | USA | No |
Consumer Health Data Processing: Consumer Health Data (including allergy information, dietary preferences, medication-related queries, pregnancy status, supplement regimen, and health inferences) is processed by Google LLC sub-processors as part of AI inference and data storage operations. All other sub-processors listed above do not process Consumer Health Data. MEMOIZE AI LLC processes Consumer Health Data in accordance with the Washington My Health My Data Act (RCW 19.373), CCPA/CPRA, and all applicable state consumer health data laws.
Zero Data Retention: MEMOIZE AI LLC has enabled Zero Data Retention (ZDR) on Google Vertex AI. This means prompts and responses sent to Gemini and text-embedding-004 are not stored by Google after processing and are not used by Google to train or improve its models.
Changes to Sub-Processors: MEMOIZE AI LLC will provide reasonable advance notice before engaging a new sub-processor or materially changing the use of an existing sub-processor, by email to the Merchant’s primary contact and by updating this page. Merchants may object to changes by providing written notice to privacy@memoizeai.com within a reasonable period following notification, specifying reasonable data protection grounds for the objection. See Terms and Conditions Section 5.4 for full details.
Data Processing Addendum: Our DPA, which governs the processing of personal data on behalf of Merchants, is available upon request by contacting legal@memoizeai.com.