Version: 2.0 | Classification: Public | Last Updated: 24. 07. 2026.
This document identifies third-party service providers engaged by Chronos Web Tech Kft. to process personal data on its behalf ("Subprocessors"); and optional third-party services that Customers may choose to connect to the Appointio platform ("Third-Party Integrations").
Subprocessors may process personal data only under contractual obligations that provide appropriate safeguards consistent with Article 28 GDPR.
| Provider | Purpose | Typical Data | Location |
|---|---|---|---|
| OVH | Cloud hosting & Encrypted backups | Customer database, uploaded information, database backups | France |
| Brevo | Transactional email delivery | Email address, notification content | EU |
| Stripe, Inc. | Payment processing | Billing information, payment transactions | EEA |
| Számlázz.hu (KBOSS.hu Kft.) | Electronic invoice generation, Application diagnostics | Customer name, billing address, tax number, invoice data, error logs, technical metadata | Hungary |
Customers may choose to connect third-party services to Appointio. Examples include Google Calendar (Calendar synchronization) and Google OAuth (User authentication).
The Company may also use Mistral AI for AI-assisted features. Customer API data is not used for model training (subject to the applicable service terms and configuration).
Where a Customer connects a Google Account, Appointio accesses only the permissions explicitly granted. Google user data is processed solely for the requested functionality. It is not sold, used for advertising, used to build user profiles, or used to train generalized AI or machine learning models. The use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
Some integrations connect the Customer directly with an external service. Where this occurs, the Customer independently authorizes the connection, the external provider may act as an independent controller under its own Privacy Policy, and Appointio processes only the data necessary to provide the requested integration.
Some subprocessors or integrations may process data outside the European Economic Area (EEA). Where this occurs, the Company relies on appropriate safeguards, such as Standard Contractual Clauses (SCCs), adequacy decisions, or other lawful transfer mechanisms under the GDPR.
The Company may update this document when a new subprocessor is engaged, an integration is added or removed, or processing activities materially change. The latest version will always be available on the Company's Website.
Questions regarding this Policy may be directed to: Chronos Web Tech Kft.
Email: [email protected] | Website: www.chronosweb.hu