Subprocessors
Last updated: 10/2/2026
Clinics are the controller of patient records. GlowPilot is a processor for that data. The vendors below may receive operational scheduling data if a clinic turns on the related feature. The Meta advertising pixel is separate: it runs only on public pages after marketing consent and does not receive patient records.
Anthropic
Staff Smart Assistant (in-app chat) and, when a clinic turns on website chat, the public booking chatbot.
Staff tools: short names, phones, emails, appointment times, invoice amounts. Website chat: visitor messages plus public treatments and slots. Not medical history. API traffic is not used to train Anthropic models.
Processing agreement not signed in this list.
Retell
Voice runtime for the phone receptionist (speech-to-text, text-to-speech).
Call audio when recording is on, transcripts when recording is on, short booking tool arguments.
Processing agreement not signed in this list. Call recording starts off.
Twilio Voice
Clinic-owned PSTN numbers for the receptionist.
Phone numbers, call metadata, SIP to Retell. The clinic’s Twilio account is the carrier.
Processing agreement not signed in this list. Numbers belong to the clinic, not GlowPilot.
Stripe
Clinic SaaS billing and, when Connect is on, Checkout of the patient invoice.
Clinic email, plan, payment method. Patient card data stays with Stripe.
Processing agreement not signed in this list.
Amazon Web Services (S3)
Storage for clinic photos the clinic uploads.
Images and object metadata under clinic-scoped keys.
Processing agreement not signed in this list.
Meta (WhatsApp / Messenger)
Clinic-owned messaging when the clinic connects a number or Page.
Phone or PSID and message template variables the clinic sends.
Processing agreement not signed in this list. The clinic pays Meta for conversations.
Meta (advertising pixel)
Measures visits and ad conversions on public marketing, signup, demo, and clinic diagnostic pages after the visitor allows marketing cookies.
Browser cookie and the public page URL. No patient name, phone, email, clinical record, or form contents.
Processing agreement not signed in this list. The pixel does not run inside the clinic app.
Google Calendar
Optional staff calendar mirror. A professional connects their Google account so GlowPilot visits appear on their phone and personal busy time can block online booking.
Treatment name, time, room, and location. Not patient names, notes, prices, or clinical records. Incoming busy blocks have no titles.
Processing agreement not signed in this list. Off until the clinic connects Google Calendar.
Processing agreements are signed separately. Publishing this list does not mean those contracts are already in force.
GlowPilot is not certified under the EU AI Act and is not a medical device. People are told they are speaking to AI.