Terms, privacy policy, legal notice and sub-processor list are published

Four documents you can send to a legal or procurement team. Terms of service, privacy policy, legal notice and sub-processor list are now published at /legal/terms, /legal/privacy, /legal/legal-notice and /legal/subprocessors, each in English and French, and linked from the footer of our public pages (the home page, the changelog, and the legal pages themselves). A reader whose language is neither gets the English version with a line saying so.

The sub-processor list is the one a security questionnaire asks for. It names every third party that processes data on our behalf to run the assistant, what each one does for the service, what data it actually sees, and where it processes it. A separate section lists every case where data leaves the European Union, including the ones a "hosted in Frankfurt" claim does not cover. The page also states how we tell you before a new provider starts processing your data, and how you can object during that notice period.

Creating an organization now asks you to accept the terms and the privacy policy. A single checkbox on the first onboarding screen, with both documents linked. We record which version of the terms was accepted, when, and by which account, so there is a durable answer to "what did we agree to". Adding another site to an organization you already have does not ask again.

The shopper data-usage notice now links to the sub-processor list, in all six languages the assistant converses in. A shopper who wants to know which AI provider handles their messages is one click away from the answer, and merchants citing the notice in their own privacy policy inherit that link.

All four documents are published as drafts. Each page carries a banner saying so: the text has not been approved by our legal team yet and may change before it is final. A few entries still carry open points marked in the text, mostly exact figures and processing locations we would rather leave visibly unanswered than guess at. Use them as our current position, not as a signed instrument. Each page shows its version date at the top, and that date moves whenever the text does.