These are the providers that process personal data on Orvium’s behalf. Each is bound by a written agreement that obliges it to process data only on our instructions, to keep it confidential and to apply security measures consistent with Chile’s Ley 21.719.
This list is versioned. We publish changes here before a new provider starts processing data, so customers have time to object. To be notified of changes, write to privacidad@orvium.ai and we will add you to the notification list.
Website and marketing
| Provider | Service | Data categories | Country / region |
|---|
| Google (Firebase Hosting) | Static hosting and CDN for orvium.ai | IP address, request logs | United States |
| Google (Analytics 4) | Site traffic analytics — loaded only with consent | Anonymized IP, device, pages visited | United States |
| Calendly | Demo scheduling widget — loaded only with consent | Name, email, meeting time, time zone | United States |
| Web3Forms | Delivers job-application and rights-request form submissions to our inbox | Everything submitted in the form, plus IP and user agent | United States / European Union |
| Meta Platforms | Advertising, Lead Ads and click-to-WhatsApp campaigns | Advertising identifiers, lead form data | United States / Ireland |
| LinkedIn (Microsoft) | B2B advertising and conversion measurement | Advertising identifiers | United States / Ireland |
Product and operations
| Provider | Service | Data categories | Country / region |
|---|
| Supabase | Application database and authentication | Account data, conversations, consent records | European Union / United States |
| Google Cloud Platform | Compute and storage for the agent platform | All product data processed by the agents | United States |
| Hehix (WhatsApp Business API) | WhatsApp message delivery and reception | Phone number, message content, delivery status | [REVISIÓN LEGAL PENDIENTE — confirmar región] |
| LLM provider(s) | Generate agent replies from conversation context | Conversation content sent at inference time; not used to train the provider's models | United States |
| Flow | Payment collection inside conversations | Name, email, amount. Card data goes directly to Flow and never reaches Orvium | Chile |
| Google Workspace | Corporate email, documents and calendar | Any personal data contained in our correspondence | United States |
| Observability tooling | Error and performance monitoring of the platform | Technical logs; personal data is scrubbed where identified | [REVISIÓN LEGAL PENDIENTE — confirmar proveedor y región] |
[REVISIÓN LEGAL PENDIENTE] Counsel to confirm the registered entity, processing region and signed DPA for every provider above, and to complete the two rows still marked pending. A provider must not go live before its agreement is signed.
Change history
| Version | Date | Change |
|---|
| 1 | September 4, 2026 | First published list. |