Data processing and subprocessors

Why this page exists

A marketplace handles account, listing, message, producer, payment, support, analytics, and agent/API data. Users and business partners should be able to understand which categories of service providers may process data for Limowo.

Processor categories

Limowo may rely on infrastructure hosting, databases, cache services, object/media storage, authentication providers, email/SMS delivery, payment providers, analytics, AI/moderation providers, security tooling, and operational support tools.

• Hosting, database, cache, and media storage should process data only to run the service.
• Authentication, email, SMS, and payment providers process data needed for their specific workflows.
• Analytics, AI, moderation, and agent/API tools should use the minimum data needed for the configured feature.

Data-sharing boundaries

Limowo should share only the data needed for each feature: account identifiers for authentication, contact details for notifications, checkout information for payment, listing or message references for moderation, and request IDs or command context for agent/API support.

International transfers

Some providers may process data outside Switzerland or the EEA. Before launch, Limowo should document provider countries, safeguards, contractual terms, and whether data can be accessed from other jurisdictions.

Processor governance

Production processor onboarding should cover purpose limitation, confidentiality, access controls, retention/deletion behavior, incident notification, auditability, subprocessor changes, and secure offboarding.

Agent and API data

Agent/API processors must not receive arbitrary shell, SQL, filesystem, GraphQL, or unrestricted network access. Public agent features should route through documented commands, approvals, scopes, audit logs, and feature flags.

Launch-gate register

Before Limowo claims final production readiness, this surface should include the verified controller, provider names, purposes, data categories, countries, retention notes, safeguards, and links to applicable provider terms or data processing terms.