Subprocessors

1. How to read this page

This page lists third-party service providers that Nuxa currently uses to help deliver, secure, support, and operate the Service and that may process customer personal data in that role.

This list is intended as a practical public baseline. Some customer-authorized integrations are described separately below because they act on customer instructions and are not the same thing as Nuxa's own subprocessors.

2. Current subprocessors and service providers

• Google Firebase. Purpose: end-user authentication and identity services for application access. Data involved may include email address, account identifiers, and authentication metadata.
• Amazon Web Services, including Amazon Bedrock where enabled. Purpose: cloud infrastructure, hosting, storage, and AI model execution. Data involved may include application data, prompts, outputs, logs, and operational metadata processed through Nuxa-controlled workflows.
• DataForSEO. Purpose: search, visibility, and SEO data enrichment used in restaurant scans and monitoring. Data involved may include business, listing, keyword, and related query or scan context.
• Serper.dev. Purpose: search-results retrieval and related scan enrichment. Data involved may include search queries, business identifiers, and scan context.

3. Customer-authorized integrations

Nuxa also connects to third-party platforms at a customer's direction. These are generally customer-authorized integrations rather than Nuxa subprocessors for all customers.

• Fleksa. Purpose: ingest restaurant operational data such as orders, menus, reviews, loyalty, floor, KDS, and cashbooks when a customer connects Fleksa.
• Google Business Profile. Purpose: visibility monitoring, local profile analysis, and customer-authorized workflow actions.
• Meta Platforms, including Facebook and Instagram. Purpose: customer-authorized social and platform connection workflows.

4. Geographic scope and transfers

Nuxa is headquartered in the United States. Some subprocessors may process data in the United States or other jurisdictions where they operate.

Where legally required, Nuxa uses appropriate transfer safeguards for cross-border personal-data processing.

5. Updates and requests

We may update this page from time to time as our infrastructure and service-provider stack changes.

If you need a DPA, transfer information, or notice of a material subprocessor change for your legal review, contact hello@nuxa.ai.