THE AGREEMENTS Version 2026-10-14
Service providers and sub-processors
This list names the services that receive data from GoodCompany, what they receive and when. Optional services are marked with their current status.
Who this is with Leveloper Informatikai és Szolgáltató Korlátolt Felelősségű Társaság
Gárdony, Berzsenyi u. 73, 2483
Tax number: 29164341-2-07 · info@leveloper.io
On this page
Production status and hosting
The core application, database, uploaded files and backups are hosted in Hungary on hardware owned and operated by Leveloper. Leveloper operates this infrastructure itself, rather than appointing an external hosting or file-storage sub-processor. Backups are made nightly, encrypted and deleted after 7 days. AI, email delivery, payment and the other services listed on the provider page may process data outside Hungary.
Files are not stored with an external storage provider. AI requests pass through OpenRouter, which forwards each request only to a zero-data-retention endpoint for the selected model. The model providers below are the companies whose models currently receive those requests. We update this page before adding or replacing a provider that receives customer data.
Operational providers
| Service | Location | Purpose | Data | When used / conditions |
|---|---|---|---|---|
| OpenRouter (AI request router) | International; may include the USA | Routes every AI request: mail classification and extraction, task and event detection, document reading, translation, Sidekick and search embeddings | Relevant email, calendar and Drive content, documents, images, prompts and retrieved workspace context; request metadata | Used when AI runs, including background jobs. Every request requires zero-data-retention endpoints and denies data collection, so providers may not store or train on it. A model with no eligible endpoint is unavailable rather than routed elsewhere. |
| Model provider: OpenAI (GPT models and text embeddings), via OpenRouter | International; may include the USA | Default model for mail analysis, extraction and Sidekick (openai/gpt-6-luna); search embeddings (openai/text-embedding-3-small); other GPT models you choose in Sidekick | The content of each AI request routed to it, as described for OpenRouter | Zero-data-retention routing enforced. |
| Model provider: Meta (Muse Spark), via OpenRouter | International; may include the USA | Task detection from email, and fallback when the default model is unavailable (meta/muse-spark-1.3) | The content of each AI request routed to it, as described for OpenRouter | Zero-data-retention routing enforced. |
| Model provider: Google (Gemini), via OpenRouter | International; may include the USA | Reading images, scanned pages, audio and video (google/gemini-2.5-flash); email translation (google/gemini-2.5-flash-lite); Gemini models you choose in Sidekick | The content of each AI request routed to it, as described for OpenRouter | Zero-data-retention routing enforced. |
| Model provider: Anthropic (Claude), via OpenRouter | International; may include the USA | Only when you choose a Claude model in Sidekick | The content of each AI request routed to it, as described for OpenRouter | Zero-data-retention routing enforced. |
| Resend | International; may include the USA | Service email such as verification, password reset, invitations, alerts and website enquiries | Recipient address and notification content; contact-form details and message when submitted | Active for service email. |
| Stripe | EEA and international processing | Subscription checkout, payment processing, customer billing portal and invoices | Billing contact, company/tax information, payment and subscription identifiers; payment details entered at Stripe | When online billing is used. Stripe may act as an independent controller for some payment/compliance activities. |
| Számlázz.hu (KBOSS.hu Kft.) | Hungary; further recipients subject to provider terms | Issuing statutory subscription invoices | Buyer name, billing address, tax number, invoice lines and amounts | Active for subscription invoices. |
| PostHog | EU cloud by default; international support/sub-processors may apply | Optional signup and subscription usage analytics | Pseudonymous user/company IDs, explicit usage events, plan, browser/device metadata and network information | Not currently enabled. If enabled, it runs only after the visitor allows analytics. Recording and automatic click capture are disabled. |
| External error reporting (Sentry-compatible) | Not applicable while disabled | Optional technical error reporting | Would receive error messages, stack traces and technical context | Not enabled. Technical errors are logged only on our own servers in Hungary. We will name the service here and give notice before enabling one. |
Other services contacted
Some pages load small public resources from other services, and billing checks VAT numbers with the EU. These services receive no mailbox, calendar, Drive or other workspace content.
| Service | Location | Purpose | Data |
|---|---|---|---|
| flagcdn.com | International content delivery network | Country flag images next to leads and clients | The viewer's IP address and browser request details, and the country shown. No other personal data. |
| Lead logo addresses returned by Apollo | Depends on the logo host | Company logos for leads found through Apollo | The viewer's IP address and browser request details |
| EU VIES VAT number check (European Commission) | EU | Validating an EU VAT number in subscription billing details | The VAT number and its country code |
Services you choose to connect
| Connection | Data and purpose | Role and controls |
|---|---|---|
| Google / Microsoft | Account identity; mailbox, calendar and Google Drive content for the integration you select | Your existing service provider. Its own terms govern your account. GoodCompany processes imported copies under the customer DPA and Google Limited Use rules where applicable. |
| IMAP / SMTP provider | Mailbox import, credentials, recipients and outgoing messages | The mail provider you select. Its processing location and terms depend on your account. |
| Lunch Flow | Read-only connected bank account details, balances and transactions; connection metadata | Used when bank feeds are configured through Lunch Flow. Underlying bank/aggregation providers depend on the connection; do not assume a single country or aggregator. |
| Enable Banking | Read-only account/transaction access and bank authorisation metadata | Alternative bank-feed provider if configured. The customer authorises the connection at the bank; no payment-initiation feature is provided here. |
| Apollo | Prospect search/enrichment inputs and returned professional contact/company information | Only when connected and used. Data received from Gmail, Google Calendar or Google Drive, and information derived from it, is never sent to Apollo or any other enrichment provider. Apollo handles the data it returns under its own terms. |
| OpenRouter web search and its search provider | A generated search query and retrieved web results used by Sidekick | When the search tool is used. Search is a separate processing path from inference and is not covered by the inference routing's zero-retention setting. |
| Browser push service | Push subscription endpoint, encrypted notification payload and delivery metadata | Only when you allow browser notifications. Delivery infrastructure depends on your browser; disabling permission stops future push delivery. |
The European Central Bank and Magyar Nemzeti Bank provide public exchange-rate data. They are not listed as workspace-data sub-processors merely because the app downloads their public rates.
Changes, transfers and questions
Where we appoint a sub-processor for customer data, the DPA requires appropriate written obligations and a lawful transfer mechanism before access begins. We will give advance notice of an intended addition or replacement and an opportunity to object on data-protection grounds. Contact info@leveloper.io for active-provider details, safeguards, notifications or an objection. An integration provider may have its own sub-processors and act as an independent controller for some functions; calling it a connected service does not remove our duties for data we transfer to it.