1. Overview
A subprocessor is a third-party service provider that processes personal data on our behalf to help us deliver the Voicegram service. This page lists the subprocessors we currently use, what they do, and where they process data.
This page is the single source of truth for our subprocessor list. Our Privacy Policy and Terms of Service link here rather than restating the list, so the disclosure stays current as the list changes.
2. Current Subprocessors
Each subprocessor below is bound by a written agreement that requires them to protect your data and use it only for the purpose described.
| Provider | Purpose | Data shared | Region |
|---|---|---|---|
| Vercel | Application hosting and serverless compute | All data in transit, request logs | USA |
| Supabase | Primary database and storage of account data | Account data, voicegram metadata, transcripts | USA |
| Cloudflare R2 | Object storage for audio files and transcripts | Audio recordings, transcripts | Global |
| LiveKit Cloud | Live audio recording infrastructure | Audio streams during recording | USA |
| Deepgram | Transcription of voicegram recordings | Audio recordings | USA |
| Anthropic | Summarization of voicegram transcripts | Transcripts only | USA |
| Resend | Transactional email delivery | Recipient email addresses, email content | USA |
| Paddle | Payment processing and merchant of record | Billing details, email address, country | UK / USA |
| Cloudflare Turnstile | Bot and abuse protection | IP address, browser signals | Global |
3. Customer-Enabled Integrations
The following processors only receive data when a Customer explicitly enables them in their Voicegram dashboard. These are not used unless you opt in.
| Provider | Purpose | Data shared | Region |
|---|---|---|---|
| Zapier | Workflow automation, only when a Voicegram Zap is connected | Voicegram details: transcript, summary, sender email, audio link | USA |
| Custom webhook destinations | A URL you configure (your own server, Make, n8n, etc.) that we send voicegram details to | Voicegram details: transcript, summary, sender email, audio link | You control |
When you enable Zapier or configure a custom webhook, Voicegram sends the voicegram details (transcript, summary, sender email, an audio link that works for 24 hours) to the destination you have authorized. You can disable or remove the integration at any time from the Integrations area of your dashboard. Voicegram does not control how the destination service stores, processes, or retains data once it is delivered.
4. International Transfers
Several of our subprocessors are based in the United States. When personal data of users in the European Economic Area, United Kingdom, or Switzerland is transferred to a country that has not been deemed to provide an adequate level of data protection, we rely on:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- The UK International Data Transfer Addendum where applicable
- Other valid transfer mechanisms under applicable law
The same security and data protection standards described in our Privacy Policy apply regardless of where your data is processed.
5. Notification of Changes
We may add, remove, or replace subprocessors as our service evolves. When we make a change that affects how Customer data is processed, we will:
- Update this page with the new list and the effective date
- Update the "Last Updated" date at the top of the page
- Notify Customers by email when the change materially affects how their data is processed, as required by applicable data protection laws
If you would like to be notified of all subprocessor changes, email security@voicegram.io and we will add you to the notification list.
6. Contact
If you have questions about any subprocessor on this page or about how your data is handled, contact us:
Voicegram LLC
1178 Broadway, 3rd Floor #3432, New York, NY 10001
Privacy inquiries: security@voicegram.io