Last updated: 9 October 2026
KF Premium LTD uses the following third parties to provide XEWI. Each processes personal data only as needed to provide its service to us, under a written agreement. We will give customers at least 30 days' notice of a new sub-processor, by updating this page and emailing account owners, so that they can object under the Data Processing Addendum.
Infrastructure
| Sub-processor | Purpose | Personal data | Location | Transfer safeguard |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Hosting and compute, data lake storage, queues, secrets, firewall, threat detection, email alerts to our staff | All Service data | UK (London, eu-west-2) | None needed (UK). |
| Supabase, Inc. | Database, authentication, sign-in emails | All Service data, including account email | Data hosted in UK (London, eu-west-2); support access may occur from the US | To be confirmed |
AI and content generation
| Sub-processor | Purpose | Personal data | Location | Transfer safeguard |
|---|---|---|---|---|
| Anthropic, PBC (Claude API) | Listing copy, analysis summaries, verdict explanations, the assistant | Assistant messages and history; product and listing content; no buyer data | United States | . Commercial terms: no training on customer data |
| AWS Bedrock (Claude Haiku, Titan Embeddings) | Competitor briefs, text embeddings for similarity search | Product and market text; no buyer data | To be confirmed | As AWS above |
| Higgsfield | Product and lifestyle image generation | Image prompts built from product data; no buyer data | To be confirmed | To be confirmed |
| Tavily | Web search for the assistant | The question the assistant searches for | To be confirmed | To be confirmed |
Payments
| Sub-processor | Purpose | Personal data | Location | Transfer safeguard |
|---|---|---|---|---|
| Stripe | Payments (currently through Stripe Payment Links) | Name, email, billing details, payment method (held by Stripe, not by us) | UK/EU/US | Stripe's DPA |
Mentorship CRM (Silent Tribe programme only — planned, not yet active)
| Sub-processor | Purpose | Personal data | Location | Transfer safeguard |
|---|---|---|---|---|
| HighLevel, Inc. (GoHighLevel) | Customer records for members of the Silent Tribe mentorship programme who have switched on "Share summary" in Settings: their progress stage in the programme, worked out from milestones in their connected account (account connected, first sale, first ad data, 30 days of sales) | Name and email (to find the member's record); programme stage; whether those milestones are reached and the number of days selling. No buyer data, no sales figures, no Amazon credentials | United States | . Not active until 30 days after this entry is published and members are told |
Data providers (no personal data)
| Provider | Purpose | Data sent |
|---|---|---|
| Keepa GmbH | Market history for products (price, rank, sales badges) | Product identifiers (ASINs) and category queries only |
Not sub-processors, but relevant
- Amazon (Selling Partner API and Advertising API) is the source of your seller data. It receives the actions you approve or the automations you enable. Amazon acts under its own terms, not as our sub-processor.
- Content delivery networks (Google Fonts, unpkg, jsDelivr, cdnjs) deliver page assets to your browser and see your IP address. See the Cookie Notice.
- AI clients you connect yourself through XEWI's MCP connection receive data on your instruction, under your agreement with that provider.