Subprocessors
VoiceDepot uses the third-party services listed below to deliver the AI receptionist platform. Each subprocessor receives only the minimum data needed to perform its function. Our agreements with subprocessors cover data protection.
| Vendor | Purpose | Data shared | Location | DPA |
|---|---|---|---|---|
| Twilio Inc. | Telephony, SMS delivery, phone-number provisioning | Caller phone numbers, message content, call metadata (duration, timestamp), recording URLs | United States | link |
| ElevenLabs Inc. | Voice synthesis, real-time conversational AI agent | Live call audio, conversation transcripts, business context (greeting, hours, services) | United States | link |
| Amazon Web Services (AWS) | Hosting, DynamoDB storage, Lambda functions, Bedrock (Claude Haiku) inference, Secrets Manager | All customer and caller data described in the Privacy Policy, processed and stored in us-east-1 | United States (us-east-1) | link |
| Stripe Inc. | Payment processing, subscription billing, Stripe Checkout | Customer name, email, billing address, partial card details (last 4 digits via Stripe), subscription history | United States | link |
| SendGrid (Twilio) | Transactional email (account confirmation, billing receipts, trial reminders) | Email address, delivery status, message content | United States | link |
| Spider.cloud | Website scraping for /try demo personalization (business name, hours, services from public website) | Public business website URL and scraped public content (no caller PII) | United States | link |
| Cloudflare Inc. | Bot-check service for the /try demo form, used when enabled | When enabled: IP address, browser fingerprint at the moment of submission | United States / Global edge | link |
| GitHub Inc. (Microsoft) | Source-code hosting, GitHub Actions CI/CD | Application source code, deployment artifacts (no customer or caller data) | United States | link |
| Google LLC | Google sign-in (portal account access); Google Calendar booking integration (via Composio) for accounts that connect a calendar; Gemini AI model for the AI-visibility audit | Sign-in: Google account email and profile name. Calendar (opt-in): booking details (customer name, appointment time) for accounts that connect Google Calendar. AI-visibility audit: the business name and search questions about it (no caller data) | United States / Global | link |
| Jina AI | Website reading (Jina Reader) to learn a business's name, hours and services for /try demo personalization | Public business website URL and the public page content it returns (no caller PII) | Global | link |
| Calendly LLC | Scheduling widget embedded on the Contact and About pages | Details a visitor enters to book a call (name, email, chosen time); the visitor's browser connects to Calendly directly | United States | link |
| Sampark Inc. (d/b/a Composio) | Managed OAuth integration broker — holds connection credentials and executes calendar/booking actions on the customer's behalf for accounts that connect a third-party calendar | OAuth connection credentials for customer-connected accounts, booking/event details passed through at call time | United States | link |
Material changes notice
We will provide active customers at least 30 days' advance notice via email before adding a new subprocessor that materially affects the processing of customer or caller personal data, or removing one that requires customer action. For routine vendor changes that do not affect data flows (e.g., adding a regional CDN node) we may update this page without prior notice.
DPA available
Customers subject to CCPA, CPRA, or similar US state privacy laws may request a Data Processing Addendum at hello@voicedepot.cloud.
Contact
hello@voicedepot.cloud · AppsTango LLC d/b/a VoiceDepot, Lehi, Utah, USA.