WAM Agents — Subprocessors

This is the international edition of the WAM Agents subprocessors list, for Users who subscribe through Creem checkout. Users who subscribe through the Russian entity are covered by a separate list.

List of third parties engaged by IE Artem Polyanskiy to process personal data of WAM Agents Users. Published as part of the Privacy Policy (Section 7).

Data controller: IE Artem Polyanskiy, Georgia (Small Business). Tax ID (s/n): 305603825. Contact: support@magnets.tg.

Last updated: 6 August 2026.

Payment

Subprocessor	Jurisdiction	Purpose	Data categories
Creem (Armitage Labs OÜ)	Estonia (EU/EEA)	Merchant of Record: payment processing, billing documents, sales-tax/VAT collection and remittance, refunds and chargebacks	Payment-instrument data, transaction identifiers, amounts, dates, billing email

Service execution

Only pseudonymised information (bound to an internal user pseudonym, not the Telegram identifier or email) is processed in the execution tier, to the extent necessary to run the Service.

Subprocessor	Jurisdiction	Purpose	Data categories
Hetzner Online GmbH	Germany (EU/EEA)	Hosting of Containers; Agent runtime	Internal user pseudonym (hashed), Bot Token, OAuth Token, content of the User’s conversation with the Agent
Telegram FZ-LLC	UAE	Message transport via the Telegram Bot API	Internal user pseudonym (hashed), content of the User’s messages and Agent responses
Deepgram, Inc.	USA	Speech-to-text (STT) for the User’s voice messages, audio and video attachments	Internal user pseudonym (hashed), audio stream of the User’s voice/audio/video messages
Hangzhou DeepSeek Artificial Intelligence Co., Ltd.	PRC	Default-model inference, performed via the Provider’s shared technical key (see Privacy Policy, Section 6)	Content of system/user messages and model responses, request metadata
OpenAI, L.L.C.	USA	Image understanding for photos, screenshots and other images the User sends, on the default-model plan	Internal user pseudonym (hashed), the image and the accompanying request text
Perplexity AI, Inc.	USA	Web search performed at the User’s request, on the default-model plan	Internal user pseudonym (hashed), the User’s search query
Replicate, Inc.	USA	Image generation and speech synthesis performed at the User’s request	Internal user pseudonym (hashed), the generation prompt and the resulting file

Independent operator (own-model flow)

Entity	Jurisdiction	Role
Anthropic PBC	USA	Processes User content when the Claude API is invoked using the User’s own OAuth Token. The User is an independent controller for this flow; the Provider does not transfer the User’s personal data to Anthropic.
OpenAI, L.L.C.	USA	Processes User content when the Codex flow is invoked using the User’s own linked ChatGPT subscription (/codex). The User is an independent controller for this flow; the Provider does not transfer the User’s personal data to OpenAI.

OpenAI appears in both tables because the two flows differ in legal role: image understanding on the default-model plan runs on the Provider’s key and is therefore a subprocessing operation, whereas the /codex flow runs on the User’s own linked subscription and the User is the controller.

International transfers

Transfers to recipients within the EU/EEA (Creem, Hetzner) require no separate transfer mechanism. Transfers to recipients outside the EU/EEA are made on the following bases: to DeepSeek (PRC) on the basis of the User’s explicit consent (GDPR Art. 49(1)(a); KVKK Art. 9 explicit consent); to Telegram (UAE) and to Deepgram, OpenAI, Perplexity and Replicate (USA) as necessary for the performance of the contract requested by the User (GDPR Art. 49(1)(b)).

Recipient countries: Estonia (Creem), Germany (Hetzner), UAE (Telegram), USA (Deepgram, OpenAI, Perplexity, Replicate, Anthropic), PRC (DeepSeek).

Changes

Changes to the list of subprocessors are published in this document. Users are notified in accordance with the Terms of Service (Section 15, procedure for amendments).