We use essential cookies for authentication and optional analytics and advertising measurement only with your consent. Learn more
To provide Wallies services, Wallies LLC uses trusted third-party vendors (subprocessors) who may process your data on our behalf. This page lists all subprocessors in compliance with GDPR Article 28 requirements.
Purpose: Backend infrastructure, database hosting, authentication
Data Processed: User accounts, conversations, memories, subscription data
Location: United States
Purpose: Payment processing for subscriptions, ILY purchases, drops, handles, tickets, and creator payouts via Stripe Connect
Data Processed: Payment information, transaction history, KYC and payout details for creators
Location: United States (global operations)
Purpose: Primary video upload, encoding, HLS delivery, and thumbnail generation for Rooms and hosted posts
Data Processed: Uploaded video files, generated thumbnails, playback metadata, viewer IP (delivery only)
Location: Slovenia (EU HQ) / Global CDN
Purpose: Secondary video ingest, encoding, signed playback, and playback analytics for select hosted content
Data Processed: Uploaded video files, playback analytics, viewer IP (delivery only)
Location: United States (global CDN)
Purpose: Live streaming (Cloudflare Stream), asset delivery, and DDoS protection
Data Processed: Stream media, IP addresses, connection metadata
Location: Global edge network
Purpose: Real-time voice and video rooms in Closets and livestreams
Data Processed: Voice/video streams (in-transit only), session metadata
Location: United States / Global
Purpose: NSFW, violence, and CSAM scanning on uploaded media
Data Processed: Uploaded images and video frames (for safety classification only)
Location: United States / Global
Purpose: Virus and malware scanning on uploaded files (marketplace assets, app uploads, message attachments)
Data Processed: Uploaded files (scanned for malware signatures only)
Location: United States
Purpose: Companion chat (LLM), content moderation classification, audio transcription (Whisper) for uploaded videos, and memory embeddings
Data Processed: Companion prompts, user-authored text submitted for moderation, video audio tracks, memory text
Location: United States
Contractually prohibited from training generalized models on Wallies data.
Purpose: Large language model processing for AI responses
Data Processed: Conversation prompts, user messages (if selected as AI provider)
Location: United States
⚠️ Optional - only if user selects Anthropic as provider
Purpose: Large language model processing for AI responses
Data Processed: Conversation prompts, user messages (if selected as AI provider)
Location: United States / Global
⚠️ Optional - only if user selects Google as provider
Purpose: Text-to-speech voice generation for companions
Data Processed: Text messages for voice conversion (no voice recordings stored)
Location: United States
⚠️ Optional - only if user selects ElevenLabs voices
Purpose: GIF search and embedding in chats, comments, and posts
Data Processed: Search queries you type into the GIF picker, IP address (for GIF delivery)
Location: United States
Purpose: Ad conversion tracking via Meta Pixel and Conversions API (only if you arrived from a Meta ad)
Data Processed: Hashed email, hashed identifiers, page-view and conversion events
Location: United States / Global
⚠️ Optional - controlled by cookie preferences
Purpose: Ad conversion tracking via Google Ads gtag (only if you arrived from a Google Ads campaign)
Data Processed: Hashed identifiers, page-view and purchase conversion events
Location: United States / Global
⚠️ Optional - controlled by cookie preferences
Purpose: Ad conversion tracking via TikTok Pixel and Events API (only if you arrived from a TikTok ad)
Data Processed: Hashed email, hashed identifiers, page-view and conversion events
Location: United States / Global
⚠️ Optional - controlled by cookie preferences
For subprocessors outside the EU/EEA, we rely on:
This page is the source of truth and is updated whenever we add, remove, or change a subprocessor. For material changes affecting how your personal data is handled, we will notify users in-app (via system message and/or in-app notification) at least 30 days before the change takes effect. Minor operational changes (e.g., regional CDN or infrastructure swaps with no change in data handling) may be reflected on this page without an individual notification. You may object to new subprocessors by contacting us at privacy@wallies.com
You retain all data subject rights (access, deletion, portability) regardless of which subprocessors are involved. Contact privacy@wallies.com to exercise your rights.