Subprocessor List

A subprocessor is a third-party provider that processes personal data on our behalf to help us run Callings.ai. This page lists our current subprocessors, what each one does, the categories of data it handles, and where it operates. It is the authoritative, living version of the list referenced in our Privacy Policy.

Each subprocessor processes data under its own agreement and only as needed to provide its service. No subprocessor uses your content to train AI models, and we do not sell your personal information.

Last updated: June 26, 2026.

Infrastructure and Security

Subprocessor Purpose Data processed Location
Amazon Web Services (AWS) Hosting, databases, storage, compute, and email infrastructure All account and content data United States
Cloudflare Content delivery, DNS, edge security, and bot protection IP address and request metadata United States and global edge

AI and Content Generation

These providers generate content you request. They receive only the content needed for the task, and none of them train their models on your data.

Subprocessor Purpose Data processed Location
OpenAI Resume, cover letter, and report generation; document parsing; embeddings Resume and profile text, job descriptions, your instructions United States
Google (Gemini) Image generation and selected content generation Content you create, such as post or card text and reference images United States
Groq Drafting of welcome and suggestion content Profile-derived context United States
ElevenLabs Text-to-speech voiceovers for Calling Cards The voiceover script you create United States
OpenRouter Illustration image generation The illustration prompt and image you create United States

Payments

Subprocessor Purpose Data processed Location
Stripe Payment processing, subscriptions, and billing Name, email, and billing details (card data is handled directly by Stripe) United States

Email, Messaging, and CRM

Subprocessor Purpose Data processed Location
Twilio SendGrid Transactional and notification email Name, email, and message content United States
Customer.io Onboarding and lifecycle email, and CRM Name, email, account and subscription attributes, and activity events United States

These run only if you accept cookies. If you decline, they are disabled.

Subprocessor Purpose Data processed Location
PostHog Product usage analytics Pseudonymous identifier and feature-usage events United States
Google (Analytics and Ads) Marketing analytics and advertising measurement on public pages Online identifiers, IP address, and page and campaign data United States

Sign-In and Connected Accounts

Subprocessor Purpose Data processed Location
Google Sign in with Google Name and email United States
LinkedIn Optional account connection to publish posts you choose to share to LinkedIn The content of the posts you publish, and your authorization to publish on your behalf United States

Providers That Do Not Receive Your Personal Data

To run job discovery and networking, we also use job-data feeds, search, and page-fetching providers that receive only a search query or a public web address, never your resume, profile, or account data. Because they do not process your personal data, they are not listed as subprocessors above.

Changes to This List

We update this page when we add or remove a subprocessor. The date at the top reflects the most recent change. For material changes, we update our Privacy Policy and may notify you.

Questions

To ask about a specific provider or request more detail, email [email protected].


Transparency about who touches your data is part of earning your trust. This list stays current so you always know who helps us run Callings.ai.