Subprocessors
Last updated: October 31, 2026
These are the companies that process personal data for Chikoh, operated by Sidekick Intelligence LLC: what each one does, what data it receives from us, and where it processes it. This list is referenced by our Privacy Policy and our Data Processing Agreement. When it changes, the date above changes.
Subprocessors
| Company | What it does | Data it receives | Location |
|---|---|---|---|
| Hetzner Online GmbH | Hosting: the servers and load balancer that run Chikoh | All data the service processes, including server logs with IP addresses | Germany (Nuremberg) |
| Cloudflare, Inc. | Network proxy, DNS and security for all traffic; Turnstile bot check at sign-in; proxy for Yahoo connections | IP address, browser details and the content of requests passing through its network | United States (global network) |
| Supabase, Inc. | Database, sign-in and file storage | Account data, league and roster data, chat history, uploaded files, sign-in sessions with IP address | EU (Frankfurt, Germany) |
| Upstash, Inc. | Cache and rate limiting (Redis); scheduled background jobs (QStash) | Account ids and IP addresses in rate-limit and cache keys; account ids in job messages | Redis: global replication including the United States; QStash: Germany (Frankfurt) |
| Anthropic, PBC | AI model (answers in chat and AI tools) | Your messages and the league context needed to answer them (league and team names, rosters, and other league members as team name and initials only) | United States |
| OpenAI, L.L.C. | AI model (answers in chat and AI tools; reading roster screenshots) | Your messages, league context and uploaded screenshots | United States |
| OpenRouter, Inc. | AI routing service; used as a fallback, and for Google Gemini models | Your messages and league context, passed to the model provider it routes to | United States, plus the country of the model provider it routes to |
| Perplexity AI, Inc. | AI model with web search | The question being researched, which can include text from your request | United States |
| DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.) | AI model, used only as a fallback when the providers above fail | Your messages and league context | China |
| Moonshot AI (Beijing Moonshot AI Technology Co., Ltd.) | AI model (Kimi), used only as a fallback | Your messages and league context | China |
| Alibaba Cloud (Qwen models, DashScope international service) | AI model, used only as a fallback | Your messages and league context | Singapore (Alibaba Cloud international endpoint); Alibaba Group is based in China |
| ElevenLabs, Inc. | Text-to-speech for voice features and trivia | The text to be spoken | United States |
| Twilio Inc. (including SendGrid) | Email (SendGrid); SMS and WhatsApp alerts you turn on | Email address, phone number, and the content of the messages we send you | United States |
| Stripe, Inc. | Card payments and subscriptions | Name, email, billing details and payment card (held by Stripe, not by us) | United States |
| PayPal, Inc. | PayPal payments — not currently offered; used only to handle refunds and cancellations of past PayPal payments | Name, email and payment details | United States |
| NOWPayments | Cryptocurrency payments | Order id, amount, and the wallet details you provide | Outside the EEA (location being confirmed with the provider) |
| Coinbase, Inc. (Coinbase Commerce) | Cryptocurrency payments | Order id, amount, and the wallet details you provide | United States |
| Discord Inc. | Discord bot for users who link Discord; internal error alerts | Your Discord id if you link it; in error alerts, an account id and a short excerpt of the failing request | United States |
| Google LLC | Sign in with Google | The sign-in exchange for your Google account (name, email, profile picture) | United States |
| Cloudinary Ltd. and BunnyWay d.o.o. (bunny.net) | Image delivery (player and team images) | Your IP address and browser details when an image loads | Cloudinary: United States; bunny.net: Slovenia (global network) |
AI fallback providers
If our main AI providers (Anthropic and OpenAI) fail, a request can be answered by a fallback provider instead: OpenRouter, DeepSeek, Moonshot AI or Alibaba Cloud (Qwen). DeepSeek and Moonshot AI process data in China; the Qwen service we call is Alibaba Cloud's international endpoint in Singapore. A request sent to a fallback carries the same content as the original request.
What AI providers may keep
Per each provider's published API terms:
- Anthropic, PBC: Its commercial terms say it does not train models on API inputs and outputs; it deletes them within 30 days, longer only to enforce its usage policy or where the law requires.
- OpenAI, L.L.C.: Its API data policy says API inputs are not used to train its models; abuse-monitoring logs, which can include prompts and responses, are kept for up to 30 days.
- OpenRouter, Inc.: Every request we send asks OpenRouter to route only to model providers that do not collect (store or train on) request data; if none is available the request fails instead.
- Perplexity AI, Inc.: Its API documentation says the Sonar API keeps no request content (zero data retention) and does not use it for training.
- DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.): Its published terms and privacy policy allow it to use inputs to improve and train its services, and it stores data in China.
- Moonshot AI (Beijing Moonshot AI Technology Co., Ltd.): Its published platform terms do not say that API inputs are excluded from training; it processes data in China.
- Alibaba Cloud (Qwen models, DashScope international service): Its Model Studio terms say it does not use customer data for model training; they do not state how long requests are kept.
Analytics and advertising
No analytics or advertising script loads on chikoh.com. If that changes, the provider will be added to this list and to our cookie banner first.
Data sources (not subprocessors)
We fetch sports and entertainment data from the sources below. Our requests to them carry sports or entertainment queries, not your account details.
- API-Sports
- SportsData.io
- DataGolf
- CollegeFootballData
- Kalshi
- OpenWeather
- TVDB
- TVmaze
- OMDb
- NewsAPI
- Tank01 (RapidAPI)
- ZenRows
- Serper
- Wolfram|Alpha
- Google Maps Platform (trivia questions)
- X (Twitter), Bluesky, Instagram — Chikoh’s own posting accounts
- Yahoo Fantasy (only when you connect it)
Contact
Questions about this list: [email protected].