Subprocessors

Tessryx LLC ("Tessryx," "we," "us," or "our") engages certain third-party service providers to process Customer Personal Data on Tessryx's behalf in connection with the Services. Those providers are Tessryx's Subprocessors for purposes of the Tessryx Data Processing Addendum ("DPA").

This page identifies the Subprocessors currently authorized to process Customer Personal Data, the functions they perform, and the locations in which processing may occur.

#1. Current Subprocessors

The applicable legal entity for each Subprocessor is the entity engaged by Tessryx under its agreement with that provider. Tessryx maintains contractual arrangements with its Subprocessors as required by the DPA and applicable data protection law.

#2. Customer-Selected Third-Party Services

Third-party services that you independently select, configure, or connect to the Services are not Tessryx Subprocessors merely because Tessryx enables your workspace to interact with them.

For example, if you configure a workflow to transmit data to an external API or connect an AI or language-model provider using credentials that you supply, that provider is selected and controlled by you. Tessryx does not engage that provider to process Customer Personal Data on Tessryx's behalf.

You are responsible for evaluating third-party services that you choose to connect, determining the terms and data protection requirements applicable to your use of them, configuring their access appropriately, and making any disclosures or obtaining any permissions required for the resulting processing of personal data.

#AI Providers, Assistants, and Agents

The same principles apply when you connect an AI provider, assistant, or agent to your Tessryx workspace.

If a workflow calls an AI or language-model provider using credentials that you supply, that provider is not a Tessryx Subprocessor for that interaction. You are responsible for determining the provider's role under applicable data protection law and for your legal relationship with that provider.

Similarly, if you authorize an assistant or agent to access the Services through the Tessryx MCP interface or API, information within the scope of that authorization may be transmitted to or accessed by the provider operating the assistant or agent. The provider does not become a Tessryx Subprocessor merely because the connection occurs through Tessryx.

You choose the provider and determine the scope of access you authorize. You are responsible for evaluating the provider, configuring the connection appropriately, and addressing the resulting disclosure and processing of Customer Personal Data.

#3. Payment Processing

Tessryx uses Stripe to process Tessryx subscription payments and related billing information. Stripe does not process Customer Personal Data contained in customer workspaces on Tessryx's behalf and therefore is not listed above as a Tessryx Subprocessor for purposes of the DPA.

Stripe processes payment information in connection with its payment services under the terms and privacy practices applicable to those services. Tessryx does not receive or store full payment card numbers.

Additional information about Tessryx's collection and use of account and billing information is provided in the Privacy Policy.

#4. Changes to Subprocessors

Tessryx may appoint a new Subprocessor or replace an existing Subprocessor as necessary to operate, secure, maintain, or improve the Services.

Before authorizing a new or replacement Subprocessor to process Customer Personal Data, Tessryx will provide customers with an active subscription at least 30 days' prior written notice. Tessryx will also update this page to identify the new or replacement Subprocessor.

A customer with an active subscription may object to the appointment of a new or replacement Subprocessor on reasonable grounds relating to the protection of Customer Personal Data. An objection must be submitted to privacy@tessryx.com within 30 days after the customer receives Tessryx's notice and should explain the data protection grounds for the objection.

Tessryx will work with the customer in good faith to address a timely and reasonable objection. Where reasonably practicable, Tessryx may make available an alternative configuration or other commercially reasonable means of avoiding processing by the objected-to Subprocessor.

If the parties cannot resolve the objection and Tessryx cannot reasonably provide the affected Services without using the new or replacement Subprocessor, the customer may terminate the affected portion of the Services. Tessryx will provide a pro-rated refund of prepaid fees attributable to the terminated portion of the Services for the period following termination.

Nothing in this Section limits any additional rights or obligations that apply under the DPA or applicable data protection law.

#5. Subprocessor Safeguards

Tessryx requires each Subprocessor to protect Customer Personal Data in a manner consistent with Tessryx's obligations under the DPA to the extent applicable to the services performed by that Subprocessor.

Where a Subprocessor processes Customer Personal Data outside a jurisdiction in which the data originated, Tessryx addresses applicable international data transfer requirements as described in the DPA.

The DPA contains the controlling terms governing Tessryx's appointment and use of Subprocessors, including applicable requirements concerning confidentiality, security, international transfers, and downstream processing.

#6. Contact

Questions about Tessryx's Subprocessors or notices of Subprocessor changes may be directed to privacy@tessryx.com.

Tessryx LLC
8605 Santa Monica Blvd #347695
West Hollywood, CA 90069