Legal

Subprocessors

The companies that process personal data for us when we run Zvani for you, what each one does and where. Changes are announced here and by email to workspace owners at least 30 days in advance, as the Data Processing Agreement says.

1. Used for every workspace

CompanyWhat it doesDataWhere · transfer basis
Hetzner Online GmbH (Germany)Servers, database, storage of recordings and backupsAll customer dataFinland and Germany (EU)
Google (Gemini API, paid service)The live conversation; transcription; summaries, scores and analysis; search in your documentsCall audio, transcripts, documents you uploadEU and USA · EU–US Data Privacy Framework, Standard Contractual Clauses; not used for training
Telnyx LLC (USA)Phone numbers, carrying calls, transfers, number checks, text messages to your staffPhone numbers, call audio in transit, call recordsEU and USA · Standard Contractual Clauses
Amazon Web Services EMEA SARL (Luxembourg)Sending email: sign-in and account letters, alerts about calls to your staffEmail addresses; caller number and summary in call alertsSweden (EU) · Standard Contractual Clauses for its US parent
Google (Firebase Cloud Messaging) and Apple (Push Notification service)Push notifications to the Zvani mobile appDevice token, notification text with caller number and summaryEU and USA · EU–US Data Privacy Framework

2. Used only when switched on

CompanyWhat it doesDataWhere · transfer basis
OpenAI (OpenAI Ireland Ltd)The live conversation for agents set to use OpenAI's voice modelCall audio and what is saidEU and USA · EU–US Data Privacy Framework, Standard Contractual Clauses; not used for training
Telegram (Telegram Messenger Inc.)Alerts about calls to a Telegram chat you connectCaller number, summary, the requestOutside the EEA · Standard Contractual Clauses; switch on only if you accept this

3. Independent controllers, not subprocessors

CompanyWhat it does
Stripe Payments Europe, Ltd. (Ireland)Takes payments, stores cards and billing details, issues invoices and calculates VAT. Stripe processes this data under its own privacy policy; Zvani never sees full card numbers.
Your own integrationsWebhooks, APIs, databases, MCP servers, Google Calendar, SMS or maps providers that you connect act on your instructions, not ours.

Last change to this list: 17 October 2026 — first publication.