LEGAL
Sub-processors
These are the outside vendors that process data on our behalf. The list comes from the integrations in our code, not from marketing copy.
Draft — pending legal review.
In use
Integrated in the product today. Some are used only for the accounts that turn the feature on.
| Vendor | What it does for us | Data it handles | Data location | Status |
|---|---|---|---|---|
| Google (Gemini Live API)Paid tier only for client calls | AI voice model: hears the caller and speaks the agent’s replies in real time. | Live call audio in both directions; the agent’s instructions (business name, hours, services, FAQs); tool results the agent reads out, such as the booking details being confirmed. | Not yet confirmed | In use |
| Telnyx | Phone service: carries the call, provides and forwards numbers, streams call audio to the agent, sends text messages. | Caller and called phone numbers; call metadata; live call audio; text message content and numbers for callers who gave their number in the call; text opt-outs. | Not yet confirmed | In use |
| Stripe | Invoicing and payment collection from our business customers. Callers are never charged and never give card numbers by voice. | Business contact name and email, billing details, invoice amounts and status. Card and bank details are entered with Stripe and are not stored by us. | Not yet confirmed | In use |
| Resend | Transactional email: call summaries, emergency alerts, booking confirmations, invitations and password links. | Recipient email addresses and the email content, which can include a caller’s name, phone number, reason for calling and appointment details. | Not yet confirmed | In use |
| Cloudflare (Turnstile) | Bot protection on the public demo and contact forms. Cloudflare may also provide DNS and proxying for our web domains. | Visitor IP address and browser signals sent with the challenge; web request metadata where traffic is proxied. | Not yet confirmed | In use |
| Google (Calendar API)Only for clients who connect Google Calendar | Reads busy times and writes booked visits to the calendar a client chooses to connect. | Busy and free times; for each booking, the customer’s name, address, issue summary and visit time. | Not yet confirmed | In use |
Planned
Not integrated yet, or not yet under contract. Customer data does not go to a vendor in this table until it moves up to “In use”.
| Vendor | What it does for us | Data it handles | Data location | Status |
|---|---|---|---|---|
| Application hosting providerProvider to be named | Runs the web app, voice gateway, background worker and the Postgres database (our own Linux server). | All service data: accounts, calls, transcripts, bookings, messages, and recordings when stored on local disk. | Not yet confirmed | Planned |
| S3-compatible object storage (Backblaze B2 is the documented plan) | Stores call recordings for clients who turn recording on, and off-site database backups. | Call recordings (audio of both sides of the call) and database backups. | Not yet confirmed | Planned |
| OpenAI | Possible alternate AI voice model. Not integrated; no customer data is sent to it. | Would be the same as for the primary voice model: live call audio and the agent’s instructions. | Not yet confirmed | Planned |
| NVIDIA models hosted on Lightning AI | Possible self-hosted AI voice models on rented GPUs. Not integrated; no customer data is sent. | Would be live call audio and the agent’s instructions. | Not yet confirmed | Planned |
| Error monitoring service | Possible error reporting for the web app and gateway. Not enabled. | Would be error details and request metadata, configured to exclude call content and phone numbers. | Not yet confirmed | Planned |
About this list
“Not yet confirmed” means we have not published a data location for that vendor. We would rather say so than guess.
Agreements with each vendor are still being put in place as part of legal review. Client call traffic goes to AI voice models only on paid tiers. Our Privacy policy and Data processing addendum are drafts. For questions or to ask about a specific vendor, use the contact form.