Subprocessors
Everyone who touches the data.
Running a phone line means other companies are involved: someone carries the call, someone turns speech into words, someone works out the driving time. Here they all are, including what each one can actually see.
Effective 21 July 2026. We will say what changed when this is revised.
In use today
| Company | What it does | Caller data it can see |
|---|---|---|
| Telnyx | Phone numbers, call carriage and call recording | Caller phone number, call audio |
| OpenAI | The speech model that holds the conversation, and transcription | Call audio, transcript |
| LiveKit | Real-time audio transport and agent hosting | Call audio |
| Supabase | The application database | Name, phone number, service address, transcript |
| TomTom | Driving-time and routing lookupsA Netherlands company, so this lookup leaves the United States. | Service address or its coordinates |
| Geocodio | Turning a spoken address into a location | Service address |
| Vercel | Website and application hosting, plus cookieless analytics | None. Visitor IP and request metadata only |
| Upstash | Rate limiting on our web forms | None. Salted, hashed identifiers only |
| Sentry | Error monitoring | None. Error diagnostics, with personal data redacted before sending |
| GitHub | Scheduled jobs that fetch and later delete call recordings | Call audio, in transit |
Announced, not yet in use
These are listed before they process anything, deliberately. Giving notice ahead of switching a company on is how this is supposed to work, and it means you are never surprised by a name appearing here after the fact. Neither of these is processing any data at the time of writing.
| Company | What it does | Caller data it can see |
|---|---|---|
| Stripe | Payments and subscription billing | None. Shop billing details only, held by Stripe |
| Resend | Transactional email, such as booking and lead notifications | Caller email address, if one was ever captured |
Two things worth pointing out
The routing lookup leaves the United States. TomTom is a Netherlands company, and working out real driving time means sending it the service address. Everything else on this list is US based.
Several of these never see a caller at all. Our rate limiting stores a salted, hashed identifier rather than a visitor’s address, so the company providing it holds nothing that can be traced back to a person. Our error monitoring strips personal data before an event is sent. Those are design decisions, not accidents, and they are the reason those rows say “none”.
Changes
When a company is added to this list we will say so before it starts processing. If a change matters to you and you would rather not continue, that is a fair reason to leave and we will not make it difficult.