Agent Hotel providers and subprocessors
Version: v1 Source policy review date: 2026-09-19 Status: versioned register of recorded test/admin provider involvement and conditional future customer processing. Dated observations and unresolved account-specific facts remain distinguished; publication does not execute an agreement.
Scope and terminology
RETRO GAMES FOX CAVIC, organization number 921560095, operates the project. Contact: zcavic87@gmail.com; +47 98416851. This register separates known test/admin involvement from conditional future customer processing. There are no customers or support/privacy correspondence. It does not classify every provider as a subprocessor. Actual roles depend on each processing purpose; providers can have independent-controller purposes.
Brevo: recorded test-email involvement
The September 10, 2026 project record states that a Brevo Free account was created through owner-authorized Google signup and terms acceptance. The same dated record confirms all-sender logs set to one month, Never store previews selected, support-account access disabled, anonymous tracking enabled, per-contact consent enabled and unknown-consent tracking disabled. The adapter supplies contactPixelTrackingConsent:false. Later research corrected the earlier message-inspection conclusion: HTML and images were observed, but actual tracking pixels, tracking requests and rewritten links were not established. We do not claim tracking-free delivery. A separate September 10 inspection covered public terms dated October 1, 2025, including DPA and annexes. It recorded instructed communications processing, separate controller purposes and international processing/support arrangements. It is not proof that the account accepted that exact inspected version or that every listed entity processed these messages. The September 11 domain migration records verified signin@agenthotel.online with Gmail Reply-To and preservation of privacy settings. DMARC aggregate authentication reports are directed to Brevo. These are dated records, not fresh account-setting verification. Public retention documentation reviewed at the time allowed additional deletion delay and did not equate preview settings with deletion of all historical copies. The notes do not establish the account-specific linkage between the recorded terms acceptance and the separately inspected public terms/DPA version, or every actual recipient/transfer for these tests. These are disclosed evidence limits, not claims that no terms were accepted or that an agreement is necessarily absent. Current settings and actual test-copy deletion have not been reverified.
Gmail: test receipt and approved contact
Gmail is the known recipient of owner test messages and the approved Reply-To/support/privacy/security address. The owner confirms that no customer/support/privacy correspondence has occurred. On September 20, 2026, the owner answered the account-type question with "private". This is recorded as personal/private Gmail, not Workspace. The answer does not establish retention settings, current message presence, forwarding, shared access or completed deletion. It also does not establish a Google DPA, Google's processing role, an applicable business agreement or EEA-only processing. These other facts remain unverified. No hypothetical customer-processing agreement or support archive is asserted or required to describe the known owner-test receipt truthfully; any future customer/support processing must establish its own applicable arrangement.
Stripe: test activity and conditional paid processing
Stripe test workflows and branding configuration are documented. Production billing remains disabled. Test mode does not establish absence of real operator/account information, and Stripe must not be described solely as a subprocessor. Live account/product terms, actual field transfers, role split and applicable financial retention require the corresponding launch evidence. No current VAT status, live charge or production payment operation is claimed.
Hetzner and other infrastructure
The intended production host is a shared Linux server in Finland. Recorded inspection found existing unrelated services and no Agent Hotel application deployment. DNS and sender preparation do not establish a deployed public application. Existing workloads must remain isolated and preserved. Do not infer that all test, mail, backup or support processing occurs in Finland. Any future customer-processing register must reconcile actual hosting, DNS, ingress, backup and other relevant providers, their roles, locations, agreements and transfer arrangements.
Customer processing agreements
Any executed customer DPA must identify the relevant authorized subprocessors and applicable change/objection mechanism. This public register does not execute that agreement or assert that a generic provider sample is the account's accepted contract.