Subprocessors

Version 1 · Last updated: November 3, 2026

These are the vendors that handle data on behalf of VinoyOS (NOZU Digital Technologies LLC) to deliver the service. Each handles that data under its own terms with us. Where we list a region it is one we have confirmed; where there is no region listed we have not published one.

Read more in our Privacy Policy and Data Processing Addendum.

Core vendors

Supabase

Purpose:
Database, sign-in, and storage of call recordings
Data involved:
Account and business data; call, chat and text records, transcripts and recordings; contacts
Region:
United States (US East)

Vercel

Purpose:
Hosts the website, dashboard and API
Data involved:
Requests to the service in transit, including call and chat content passing through the app

Railway

Purpose:
Runs background workers and the job queue (Redis)
Data involved:
Job data such as call follow-ups, messages to send, and post-call processing

Retell AI

Purpose:
Voice AI: answers and places calls, speech-to-text, text-to-speech, call recording, website voice calls
Data involved:
Live call audio, recordings, transcripts, caller phone numbers
Note:
Keeps its own copy of calls. Its published terms allow it to use call data, after de-identifying and aggregating it, to develop and train the AI models in its service.

Twilio

Purpose:
Phone numbers, call routing, SMS and WhatsApp messaging
Data involved:
Phone numbers, call metadata, text message content and delivery status

Stripe

Purpose:
Subscription billing and payments
Data involved:
Business owner name, email, billing details and payment card data (card numbers are held by Stripe, not VinoyOS)

Mistral AI

Purpose:
AI language model for website chat, pulling details out of calls, and other AI tasks
Data involved:
Chat messages, call and conversation text, business information used in prompts

Groq

Purpose:
AI language model for fast replies (text replies, call summaries) and as a fallback to Mistral
Data involved:
Text messages, call and conversation text, business information used in prompts

Resend

Purpose:
Sends email (notifications, reminders, billing, contact-form messages and review requests)
Data involved:
Recipient email addresses and email content

Upstash

Purpose:
Rate limiting to protect the service from abuse
Data involved:
Request counters tied to a request identifier such as an IP address

Sentry

Purpose:
Error monitoring and diagnostics
Data involved:
Technical error reports and performance traces; may include identifiers such as business IDs
Region:
United States

PostHog

Purpose:
Product analytics, recorded from our servers
Data involved:
Usage events for business accounts, keyed by business ID

Used only for some features

These vendors see data only when a business turns on the related feature, or for internal purposes noted below.

Cal.com

Purpose:
Appointment booking, when a business connects it
Data involved:
Caller name, contact details and booking details

Shopify

Purpose:
Store catalog and cart context, when a business connects a Shopify store
Data involved:
Product catalog and cart contents; store information

Nango (HubSpot)

Purpose:
Holds the connection to a business owner’s HubSpot account when they connect it, so we can send leads to it
Data involved:
Integration credentials; contact details the owner chooses to send to HubSpot

Meta (Facebook Lead Ads)

Purpose:
Receives leads from a business’s Facebook lead forms, when the business connects them
Data involved:
Lead form answers such as name, phone and email

Google

Purpose:
Imports a business’s Google Business Profile when the owner connects it; Google Cloud Storage keeps an archive copy of security breach-detection audit events
Data involved:
Business profile data the owner authorises; audit event details

SendGrid

Purpose:
Receives emails a business owner sends to update their AI’s instructions
Data involved:
The owner’s email and its content

SerpAPI

Purpose:
Looks up public details about a business by name during sign-up
Data involved:
Business name and industry

Voyage AI

Purpose:
Text embeddings for the learning features
Data involved:
Short pieces of conversation context and learning notes

Anthropic

Purpose:
AI language model used as a tie-breaker in internal quality testing (simulations)
Data involved:
Simulated test conversations

Used for our own sales outreach

These do not receive our business customers' calls, chats, texts or contacts.

Exa

Purpose:
Web search used to find businesses we may contact about VinoyOS
Data involved:
Search queries; public business contact details from the web

Google Workspace (Gmail)

Purpose:
Sends and receives our own sales emails to businesses
Data involved:
Business contact names, email addresses and email content

Changes to this list

We update this page when we add or replace a vendor. Business customers who want to be told in advance can email ops@nozudigitaltechnologies.com.