Worldie sub-processors
Last updated: 5 October 2026. Operated by KLB Solutions FZCO, Dubai, United Arab Emirates ("Worldie").
Worldie processes guest and operator data on behalf of its customers. The customer (the "Property") is the data controller and Worldie is the processor. To deliver the service we use the companies below. We name them, say what each one does, what data it receives and where it processes that data.
Where data is stored. All customer and guest data is stored in one region today: London, United Kingdom. We do not currently offer EU-only or region-selectable hosting. For customers in the EU, transfers to the UK rely on the European Commission's adequacy decision for the UK.
Where AI processing happens. AI providers process data in the location shown against each one, which may be outside the UK and the EEA. Which provider handles a Property's conversations depends on how that Property is configured. We do not currently offer EU-only AI processing.
We are putting data processing agreements in place with each sub-processor.
In use
| Sub-processor | What it does for us | Data it receives | Location |
|---|---|---|---|
| Supabase, Inc. | Database and file storage | All customer and guest data held in the platform: guest identity and contact details, messages, bookings, preferences, staff accounts and knowledge-base content | London, United Kingdom |
| Vercel Inc. | Application hosting, serverless functions and logs | Requests and responses passing through the application, IP addresses, runtime logs | Application compute in London, United Kingdom; the vendor network and logs are global and may be in the United States |
| OpenAI | AI responses (the platform default provider), message embeddings for knowledge retrieval, speech-to-text for voice notes, image reading for menus | Guest messages and the context sent with them (for example guest name, preferences and conversation summary), knowledge-base text, voice notes, images | United States |
| Anthropic PBC | AI responses where a property selects it; image reading | Guest messages and the context sent with them (for example guest name, preferences and conversation summary), knowledge-base text, images | United States |
| Google LLC (Gemini API) | AI responses where a property selects it; image reading | Guest messages and the context sent with them (for example guest name, preferences and conversation summary), knowledge-base text, images | United States / global |
| OpenRouter, Inc. | AI gateway to third-party models, used as a fallback route and where a property selects it | Guest messages and the context sent with them (for example guest name, preferences and conversation summary), knowledge-base text | United States; the onward model host varies with the model selected |
| DeepSeek | AI responses where a property is set to use it A selectable AI provider. It processes data only for properties that are set to use it. | Guest messages and the context sent with them (for example guest name, preferences and conversation summary), knowledge-base text | People's Republic of China |
| TypeSafe | Decision support: classifies an incoming guest message (intent, urgency, whether it describes a medical emergency) and checks the AI's draft reply against the facts the AI was given | The latest guest message and up to two preceding guest messages. For reply checks: the guest message, the AI's reply, and the property knowledge and upcoming reservations the reply relies on. Messages can contain health information the guest chose to write. | Being confirmed with the vendor |
| Resend, Inc. | Sending transactional and guest email | Email addresses, subject lines and message content | United States |
| Meta Platforms (WhatsApp Business, Messenger, Instagram) | Guest messaging channels and social publishing Meta is also an independent controller of data on its own platforms. | Phone numbers or account IDs, message content and media, profile name | United States / Ireland |
| Functional Software, Inc. (Sentry) | Error and performance monitoring | Technical error data. Email addresses and phone numbers are masked in server error reports before they are sent. | European Union |
| Firecrawl | Reads a property's own public web pages when it imports its knowledge base, and public business pages for creator outreach | Web addresses and public page content. No guest conversations. | United States |
| Google LLC (Maps Platform) | Place and review lookups for onboarding and outreach | Place IDs, search text, public reviewer names. No guest conversations. | United States / global |
Only if a Property turns them on or brings its own account
These are used only where a Property enables the feature, supplies its own account, or selects the provider.
| Sub-processor | What it does for us | Data it receives | Location |
|---|---|---|---|
| Twilio Inc. | SMS channel, using the property's own Twilio account | Guest phone number, SMS text, delivery status | United States |
| Stripe, Inc. | Payment links, using the property's own Stripe account | Guest name, amount and payment status. Card details are handled by Stripe. | United States / global |
| Vapi | Voice calls with the concierge, where a property enables voice | Guest voice audio, transcripts, phone numbers | United States |
| Retell AI | Alternative voice-call provider, where a property enables voice | Guest voice audio, transcripts, phone numbers | United States |
| Mistral AI | AI responses where a property is set to use it | Guest messages and the context sent with them (for example guest name, preferences and conversation summary), knowledge-base text | France / European Union |
| Alibaba Cloud (Qwen) | AI responses where a property is set to use it | Guest messages and the context sent with them (for example guest name, preferences and conversation summary), knowledge-base text | China / Singapore |
| Upstash | Shared rate limiting, if enabled | Rate-limit keys derived from IP addresses | Multi-region |
| X, LinkedIn and TikTok | Publishing a property's or creator's own posts, where they connect their account | Post text and media, account authorisation tokens (stored encrypted) | United States / European Union / Singapore |
| OpenWeatherMap | Weather lookups for the concierge | A city name typed by the guest | United Kingdom / global |
Questions
For questions about this list, see our privacy policy or write to adam@klb-solutions.com.