Service operator
Avatar Genie LLC d/b/a Tessal
LLC formed in Delaware
Contact: Tessal contact page
How we use service providers
Running the Service means relying on specialist providers for infrastructure, payments, delivery, and security. A provider is engaged only when the related feature is configured or enabled, receives only the information it needs to do its job, and is bound by contract to protect that information and use it only for us.
Providers process information in the United States unless stated otherwise below. This list supports our Privacy Policy and the U.S. Data Processing Addendum.
Core infrastructure
Railway provides application hosting, managed PostgreSQL databases, Redis, background workers, private object storage, networking, and custom-domain certificate provisioning. It processes account, site, content, file, activity, and technical data needed to run the product.
Billing
Stripe processes subscription checkout, payment methods, recurring charges, invoices, tax details where enabled, and the billing portal. Stripe receives the billing contact and payment details. We receive subscription status and limited identifiers such as card brand and the last four digits, and never full payment-card numbers.
Email and messaging
Resend, or an SMTP provider selected by the operator, delivers transactional email including verification, password reset, security alerts, billing notices, team invitations, and the business notifications a customer enables. These providers receive recipient addresses and message content.
Discord delivers selected operational alerts when the platform owner or a customer enables that connection. Browser push notifications, when enabled, are delivered through the push services operated by the browser vendor, which receive an encrypted payload and a subscription identifier.
Security and abuse prevention
Cloudflare provides Turnstile, an optional bot-protection challenge on public forms. When it is configured, Turnstile receives technical signals from the visitor’s browser to distinguish a person from an automated script.
Optional AI assistance
OpenAI processes prompts and the business context supplied when an account uses an enabled AI-assisted feature. Requests are configured so the provider does not retain the content for training its models, and no request is sent unless a user starts an AI action.
Monitoring and diagnostics
Sentry processes error and diagnostic information when error reporting is enabled, so we can find and fix failures. Diagnostic events are bounded and are not used for advertising or profiling.
Domains and certificates
When a customer connects a custom domain, the domain registrar and DNS provider that customer chose process the domain configuration, and a certificate authority issues the TLS certificate. Railway coordinates issuance and renewal. These providers receive domain names and technical validation records rather than site content.
Changes to this list
We publish a new version of this page when the list changes materially, and we update it before a new provider begins processing customer information where that is practical.
We may replace a provider with one performing a similar function. Customers who want to raise a data-protection concern about a provider can use the objection process in the U.S. Data Processing Addendum, or contact the privacy contact listed on this page.