Hi,

Thanks for the previous answers. A few points are still not fully clear to me:

[1] You confirmed the data is stored in London, UK. Is any customer data also processed outside the UK or EU/EEA, for example by support staff, subprocessors, or AI providers?

[2] Do you provide a DPA for EU customers, and can it be reviewed before purchase?

[3] Do you have a public subprocessor list covering hosting, AI, analytics, support, and messaging services?

[4] Since you mentioned using a customer’s own OpenAI key, does any message content still pass through your systems first, or is it sent directly to OpenAI?

[5] For GDPR, are any logs, chat transcripts, or training data retained, and if so, for how long?