Subprocessors
kinetic-ops.app · GoSafe
v1.5 · Effective 2026-09-26
This page lists every third party that handles data for this website and the products it describes — GoSafe (since 2026-09-26) and KIP — so you can see where information goes before you give us any of it. The list will change as KIP develops. Changes are made with notice: we update this page and date each change in the log below.
Scope. GoSafe is a proof of concept that is not open to the public and processes no personal information from the public; its own subprocessors will be listed here before it does. KIP is in build and not yet released. Today, the only personal information we collect is the sign-up form on this website (the GoSafe interest list and the earlier KIP waitlist), which Cloudflare stores. The KIP rows describe that app's data path as designed, published now so pilot candidates can see it up front.
| Subprocessor | Role | Data touched | Region / edge |
|---|---|---|---|
| xAI | Realtime voice processing (Grok, primary) | Live session voice audio, in transit, and the transcripts it produces. Raw audio is never persisted. | US edges — transit only |
| OpenAI | Voice (fallback realtime provider) | Same posture as xAI: live session voice audio in transit; raw audio never persisted. | US edges — transit only |
| Anthropic | Report and message drafting | Canon excerpts and the topic you ask KIP to draft on, plus the draft text returned. No voice audio. Draft-only — nothing is sent for you. | US edges — transit only |
| Google Cloud | Canon storage | Session transcripts and canon data (the owned business knowledge base KIP answers from). Transcript retention target: 90 days. | africa-south1 (South Africa) |
| GitHub | Dispatch transit | Dispatch instructions and run metadata for governed workflows. No voice audio. | GitHub-hosted infrastructure — transit only |
| Cloudflare | Website hosting, sign-up storage and traffic measurement | GoSafe interest-list and KIP waitlist entries: email (required), name (optional), free-text note (optional), consent timestamp, source/UTM strings (which also tag the product) — stored in Cloudflare D1. Aggregate, cookieless traffic measurements (Cloudflare Web Analytics): no cookies, no device storage, no personal identifiers. | Cloudflare global edge |
| Google LLC | Consent-gated website analytics (Google Analytics 4) | Usage and device data — pages viewed, approximate location, browser and device details — plus _ga cookies. Collected ONLY after a visitor chooses Allow on the website's analytics banner; Google signals and ad personalization disabled. | Google global infrastructure (US-headquartered) — Google's Data Processing Terms incorporate the EU Standard Contractual Clauses |
Before any pilot session runs, each subprocessor above will be engaged under a data processing agreement, and the AI providers — xAI, OpenAI and Anthropic — will be used only under no-training and zero-data-retention terms: content sent to them would transit their US edges during use and be neither stored there nor used to train their models. Billing at release will be handled by Apple (App Store) and RevenueCat; they will be added to this list before any payment is processed. Today, Cloudflare processes personal information for this website — the GoSafe interest list and the KIP waitlist, plus cookieless, aggregate-only traffic measurement that stores no personal identifier — under its standard data processing agreement; Google processes website analytics data only for visitors who choose Allow on the analytics banner, under Google's data processing terms. KIP sessions are designed transcript-only: raw audio is never persisted anywhere in that design, and canon data will stay resident in africa-south1.
Questions and complaints. Information Officer and privacy contact: Charl le Roux, charl@alteragro.com. General contact: charl@alteragro.com. You may also lodge a complaint with the Information Regulator (South Africa) under POPIA.
Change log
- v1.5 (2026-09-26) — operator restated as GoSafe (founders Ian Groenewald and Charl le Roux); company identity removed; privacy contact is Charl le Roux.
- v1.4 (2026-09-26) — scope widened to the GoSafe interest list (same Cloudflare D1 store, product-tagged); GoSafe's own subprocessors to be listed before it processes public data; contact address updated.
- v1.3 (2026-08-29) — added Google LLC: consent-gated website analytics (Google Analytics 4), collected only after an explicit Allow on the analytics banner.
- v1.2 (2026-08-29) — Cloudflare role widened to include cookieless, aggregate-only traffic measurement (Cloudflare Web Analytics).
- v1.1 (2026-08-28) — added Anthropic (report and message drafting) and a note on billing providers at release.
- v1.0 (2026-08-28) — initial list.
GoSafe, a venture of Ian Groenewald and Charl le Roux · Place of business: Stellenbosch, Western Cape, South Africa · Governed by the law of South Africa
Last reviewed: 2026-09-26