Provider and Subprocessor Notice

AIME uses service providers for account operation, hosting, payment, email, security and optional Product features. A provider's privacy role may differ by service: processor, independent controller or a direct integration chosen by the customer. This notice does not assert that every provider agreement, region or transfer mechanism has been independently verified. Customers needing the complete contract and location register may request it at privacy@aime.gr.

AIME uses a managed identity/database service for accounts and Product records, managed hosting for applications, Stripe for AIME payments, and email and monitoring services for transactional delivery and operational incidents. Stripe may act under its own terms for payment processing. Access to Product data is limited to the purposes needed to provide and secure the chosen service. The DPA Annex III gives the proposed controller-processor allocation and categories for business customers; AIME will verify executed terms and processing locations before legal approval.

Google Business Profile is connected only when an authorized Review Responder customer opts in; Google Calendar is connected only for relevant Bookr functionality; Google PageSpeed Insights may be called for QuickScan where configured. Google Analytics and Google Ads on the marketing site require the corresponding optional consent. AI model services receive selected inputs only for a requested Product feature. Such integrations may have separate provider terms and independent-controller roles. A customer can disconnect a supported account through its Product controls or request assistance.

AIME will give business customers notice of material subprocessor changes under the agreed DPA and handle reasonable objections through its contract process. Where processing leaves the EEA, the actual recipient, location and Chapter V safeguard must be checked for the specific service. Contact privacy@aime.gr for the current register or a data-transfer question.