Sub-processors
Last updated: November 7, 2026
These are the companies that process personal data for bizvoid, what each one does for us, what it receives, and where. Our Privacy Policy says how we use your data, and our Data Processing Addendum covers the personal data of your own customers and contacts that we process for you. Some features listed here are off until someone turns them on, as the Privacy Policy explains.
Changes. We will tell account owners by email or in the app at least 30 days before we add a sub-processor that handles our customers' personal data, and update this page at the same time. If you object, you can turn off the feature it serves or close your account before the change takes effect. Questions: support@bizvoid.com.
Services you connect yourself, such as your own Stripe, Google, Meta, TikTok, Microsoft, QuickBooks, Square, Xero, Shopify, Wix, Netlify or GitHub account, are your providers, not our sub-processors. We use them only because you connected them.
AI and speech
We never use your data to train AI models. Google's paid Gemini terms do not let Google use it to improve its products. The AI chat on a client portal and creative analysis are off until someone turns them on.
Google (Gemini API, paid tier)
- What it does
- Cold Call Coach suggestions, Site Builder text, images and videos, website fix suggestions, AI workflows and checking written feedback notes. Only when turned on: the AI chat on a client portal, and creative analysis of Google Ads and Meta ads.
- Data it receives
- Cold Call Coach transcripts; the business details and photos you add for a site; website content; feedback notes with contact details removed. Portal chat: the client's questions and their agents' call and text summaries, which may include callers' names and numbers. Creative analysis: one ad account's ad previews, headlines, ad text and results totals. Google does not use this to improve its products and keeps it up to 55 days to detect abuse.
- Where
- Any country where Google has facilities, including the United States
OpenRouter
- What it does
- Runs the Qwen 2.5 72B model for pitch drafts, audit reports, the in-app chat assistant, Discover's AI filters, email follow-up drafts, the business check on a Client Billing application, and the business manager agents' briefings, answers, review reply drafts and win-back email drafts.
- Data it receives
- Public details of the businesses you look at; your own business details; what you type into the chat assistant; your Client Billing application's description of your business; counts of your agents' work, public reviews, and a customer's first name for a win-back email. Never invoices, payments or ad data. We ask OpenRouter to use only model hosts that do not collect prompts.
- Where
- United States; OpenRouter passes each request to a host that runs the model, which may be in another country
Deepgram
- What it does
- AI voice agents: turning the caller's speech into text, speaking the agent's replies, and running the model that writes them.
- Data it receives
- Live call audio, the call's text, and the agent's instructions and business details. We opt every call out of Deepgram's model training, so Deepgram does not train on it and keeps it only while it handles the call.
- Where
- United States
OpenAI (through Deepgram)
- What it does
- The gpt-5.4-mini model that writes AI voice agents' replies. Deepgram sends it the requests; we have no account with OpenAI.
- Data it receives
- The call's text and the agent's instructions and business details.
- Where
- United States
AssemblyAI
- What it does
- Live transcripts of Cold Call Coach calls.
- Data it receives
- Audio of both sides of the call.
- Where
- United States
Hosting, data and messages
Supabase
- What it does
- Our database, file storage and sign-in.
- Data it receives
- All the data in your account, and the files you upload.
- Where
- United States and EU
Railway
- What it does
- Hosting for our app and servers, including the server that connects AI agent calls.
- Data it receives
- All data passing through the app, including live call audio on its way to Deepgram.
- Where
- United States
Twilio
- What it does
- Phone numbers, calls and text messages, and storing call recordings when a business turns call recording on.
- Data it receives
- Phone numbers, call audio, text messages and call recordings.
- Where
- United States
Resend
- What it does
- Sending our emails, and the emails businesses send their own customers through bizvoid.
- Data it receives
- Email addresses, names and email content.
- Where
- United States
Stripe
- What it does
- Payments for plans, credits and agent balance, money a client adds to their agents from a client portal, Client Billing, and booking deposits.
- Data it receives
- Names, emails, card details (entered with Stripe, never stored by us), amounts and payment status.
- Where
- United States and other countries where Stripe operates
Cloudflare (Turnstile)
- What it does
- Checking that you are a person when you sign in, sign up, or send the Book a demo or Contact sales form.
- Data it receives
- IP address and browser and device signals.
- Where
- United States and other countries where Cloudflare operates
Finding business contacts
Only when you ask us to find a business or its owner's email.
Trestle, EnformionGO and Cobalt Intelligence
- What it does
- Looking up a business owner's name and contact email.
- Data it receives
- The business's name, phone number, address or website, and the owner's name when we have it.
- Where
- United States
BetterContact
- What it does
- Finding a business's contact email.
- Data it receives
- The business's name, the owner's name, and its website domain.
- Where
- Where BetterContact and its hosts operate, which may be outside the United States
MillionVerifier
- What it does
- Checking that an email address can receive mail before we show it.
- Data it receives
- The email address only.
- Where
- Where MillionVerifier and its hosts operate, which may be outside the United States
Our own website, with your consent
Only on our public pages, never in the logged-in app, and only after you accept cookies (see the Cookies section of our Privacy Policy).
Google Analytics and the Google Ads tag
- What it does
- Counting visits to our public pages and measuring our own advertising.
- Data it receives
- Pages viewed, browser and device details, and cookie IDs; cookieless signals only until you accept.
- Where
- United States
Meta Pixel and TikTok Pixel
- What it does
- Measuring our own advertising.
- Data it receives
- Pages viewed and events such as a completed purchase, with a hashed email for Meta.
- Where
- United States