Subprocessors

This page identifies the service providers and other recipients involved in delivering Guildcores. It distinguishes active providers from optional connections that do not receive data unless a customer or administrator enables them.

Guildcores Pte. Ltd. is incorporated in Singapore and has its registered office at 68 Circular Road, #02-01, Singapore 049422. Questions and objections can be sent to info@guildcores.com.

Active subprocessors

OpenAI states that, by default, API inputs and outputs are not used to train or improve its models. Guildcores does not claim zero data retention because provider retention depends on the account, endpoint, and feature configuration. Current OpenAI information is available in its business data commitments, Data Processing Addendum, and subprocessor list.

Google's current data processing terms and provider information are available in its Cloud Data Processing Addendum and Google Workspace subprocessor list. Vultr publishes its privacy terms and compliance information.

These links are public reference materials. Listing a provider document does not mean Guildcores has executed that provider's Data Processing Addendum, Standard Contractual Clauses, or another customer-specific transfer agreement. The applicable order form and transfer schedule must identify the provider terms and transfer mechanism actually in force for a customer deployment.

Provider names can change through corporate reorganisation or revised contracting terms. The legally responsible entity is the entity identified in the applicable provider agreement for the Guildcores account.

Optional connections and recipients

The following paths do not receive customer data unless the relevant feature and credentials are enabled:

An optional service becomes a subprocessor only when Guildcores enables it to process customer personal data for the contracted service. We will update this page before or when a material optional provider becomes active.

Other recipients and processing locations

These are relevant disclosures but are not all subprocessors:

• A designated Guildcores operator device receives database and uploaded-file backup copies for recovery. Copies are retained for up to 30 days. This is an internal processing location controlled by Guildcores, not an outside service provider.
• Some contact or talent cards can display an image from the original social platform or content delivery network. The visitor's browser may connect directly to that image host and disclose ordinary request information such as an IP address and user agent. The image host acts under its own terms for that browser request.
• Professional advisers, auditors, insurers, authorities, or a corporate successor may receive limited data where necessary for advice, legal compliance, claims, or a lawful transaction. They are bound by law or appropriate confidentiality duties.
• The application no longer calls the former public IP geolocation service used by the website contact form. That service does not receive contact-form IP addresses from the current application.

International transfers

The production service is hosted in Japan and Guildcores is established in Singapore. Providers may process data in the United States and other countries listed in their terms. Where required, Guildcores will identify the applicable provider terms and enter an appropriate transfer safeguard before the restricted transfer begins. The customer order form or transfer schedule records the mechanism in force.

For European Economic Area restricted transfers, the parties may execute or otherwise validly enter into the applicable European Commission Standard Contractual Clauses. United Kingdom transfers may use the applicable UK International Data Transfer Addendum or International Data Transfer Agreement as a separate mechanism. No such instrument is represented as executed merely because this page links to it. Contact us for the mechanism relevant to a specific customer deployment.

Provider selection and oversight

Guildcores reviews a provider's role, information required by the feature, published security material, processing terms, location, and available transfer mechanism before material customer data is routed to it. Access is limited to the data needed for the enabled function. Removing a connection stops future access after available credentials are revoked, but it does not by itself erase data already imported or transmitted.

The linked vendor lists may identify their own subprocessors. Guildcores does not reproduce every lower-tier provider here because those lists change independently. Customers should use the linked current lists for that detail.

Changes and objections

Guildcores will give business customers at least 30 days' advance notice before adding or replacing a subprocessor that will materially process customer personal data, unless an urgent security or legal reason makes advance notice impractical. Notice may be given by email, an in-product notice, or an update to this page with direct customer notice where the change is material.

A customer may object during that period on reasonable data protection grounds. The parties will work in good faith on a commercially reasonable alternative. If no reasonable alternative is available, either party may terminate the affected service without penalty for the unused prepaid period. An emergency replacement may proceed where needed to protect data or keep the service lawful, with notice as soon as reasonably possible.

Contact

Guildcores Pte. Ltd. 68 Circular Road, #02-01 Singapore 049422 info@guildcores.com