Subprocessors
Last updated:
What this page is
A subprocessor is a third-party company that processes personal data on our behalf so that ConvoSparr can work. This is the complete list, what each provider does, and what data it sees.
Where a provider may use the data it receives to improve its own models, we say so plainly in the last column rather than leaving it to be discovered in their terms.
Current subprocessors
Supabase
Supabase, Inc. · United States
Database, authentication and secure file storage.
Data it sees: Account and profile data, session records, call recordings, transcripts, scores and analysis.
Trains on your data: No
Vercel
Vercel, Inc. · United States
Hosting and delivery of the web application, and automated bot detection on sign-up and call-start requests.
Data it sees: Requests to the Service, including IP address and standard request metadata.
Trains on your data: No
Bot detection is Vercel BotID, a Vercel product, so it is covered by this entry rather than listed separately.
Cloudflare
Cloudflare, Inc. · United States
Human-verification challenges on sign-in, sign-up, password reset and the no-signup demo.
Data it sees: Challenge interaction data and IP address at the moment a challenge is solved.
Trains on your data: No
Railway
Railway Corp. · United States
Hosting for the real-time voice service.
Data it sees: Live audio and conversation transcripts while a session is running.
Trains on your data: No
LiveKit
LiveKit, Inc. · United States
Real-time audio transport for live voice sessions.
Data it sees: Session audio in transit. Not persisted by LiveKit.
Trains on your data: No
Deepgram
Deepgram, Inc. · United States
Real-time speech-to-text transcription.
Data it sees: Your session audio.
Trains on your data: May train on it
Under our current plan Deepgram may retain that audio and use it to improve its own speech-recognition models. Avoid speaking sensitive personal information during sessions.
Cartesia
Cartesia AI, Inc. · United States
Text-to-speech voice synthesis for the AI personas.
Data it sees: Only the AI-generated text, so it can be spoken aloud. Never your speech.
Trains on your data: May train on it
Under Cartesia's standard terms it may use the text we send and the audio it generates to improve its models.
OpenRouter
OpenRouter, Inc. · United States
Gateway to the language models powering the live conversation and the post-session analysis.
Data it sees: Session context and transcripts, routed to third-party model providers.
Trains on your data: Configured off
Configured so providers do not train on your data. Providers may still briefly retain it as needed to process a request. The underlying models change over time.
PostHog
PostHog, Inc. · United States
Product analytics and session replay.
Data it sees: Product-usage events, an account identifier, and masked session replays of your use of the app.
Trains on your data: No
Gated by your cookie choice. Inputs are masked in replays.
Sentry
Functional Software, Inc. · United States
Error monitoring and diagnostic logging for voice sessions.
Data it sees: Technical error context such as the page and the error stack, plus diagnostic logs from voice practice sessions. Those logs include the practice conversation itself: what was transcribed, what the AI said, and the instructions it was given. Retained for a short period and used only to diagnose faults.
Trains on your data: No
Resend
Plus Five Five, Inc. · United States
Email delivery.
Data it sees: Your name and email address, to deliver account, security and transactional email.
Trains on your data: No
Paddle
Paddle.com Market Limited · United Kingdom
Payment processing and subscription management.
Data it sees: Billing information, handled directly by Paddle as Merchant of Record.
Trains on your data: No
We never receive or store full payment card details.
Google LLC · United States
Optional sign-in with Google.
Data it sees: If you use it, your name, email address and profile picture.
Trains on your data: No
Changes to this list
We update this page when the list changes. If you would like to be told directly, write to privacy@convosparr.com and we will add you to the notification list for your organization.
For how we handle personal data generally, see our Privacy Policy. For the controller-processor terms that apply when your employer buys ConvoSparr for a team, see the Data Processing Addendum.