Legal
Subprocessors
The companies that process data on our behalf so the platform can work. Each is bound by contract to use it only to provide their service to us.
Effective August 1, 2026
1. Current subprocessors
Every entry below exists because a specific part of the product cannot work without it. Each one is contractually restricted to processing data on our instructions, and none of them is permitted to use your data for their own purposes.
| Provider | What it does | What it processes | Location |
|---|---|---|---|
| Supabase | Database, authentication, and file storage | All platform data: accounts, contacts, jobs, invoices, transcripts, website content | United States |
| Vapi | Voice AI — answering and holding phone conversations | Call audio, transcripts, and the business information the assistant needs to answer | United States |
| Twilio | Telephone numbers, call routing, and SMS delivery | Phone numbers, call metadata, message content and delivery status | United States |
| Stripe | Payment processing — both your subscription and payments from your customers | Card data (handled entirely by Stripe), payment amounts and outcomes, business identity verification | United States |
| Calendar synchronization, Business Profile management, and reCAPTCHA on our forms | Calendar availability and JobOne-created events, business listing fields and reviews | United States | |
| Resend | Transactional email delivery | Recipient email addresses and message content — quotes, invoices, confirmations, notices | United States |
| Vercel | Hosting for the application, this website, and customer websites | Request logs, IP addresses, and content served | United States |
| Railway | Hosting for the long-running voice orchestration worker | Call session state in transit | United States |
2. What we deliberately do not use
- No advertising or tracking networks. There are no ad pixels, no retargeting tags, and no data brokers in this list, on this website or in the application.
- No data enrichment or list vendors. We do not buy contact data and we do not append anything to your customer records from outside sources.
- No card data on our own servers. Card details go directly to Stripe through hosted fields and never pass through systems we control.
- No Google Calendar data sent to AI providers. The voice assistant is told whether a slot is free or busy — never what is in the calendar.
3. Changes to this list
We update this page when a provider is added or removed. Providers get repriced, deprecated, and acquired, so each of these sits behind an internal interface that lets us replace one without rebuilding the product.
To be notified of changes, email [email protected] and ask to be added to the subprocessor notice list.
See also our Privacy Policy and Terms of Service.
Questions?
Write to [email protected] or Frog Byte, LLC, 5 Temple St #124, Kennebunkport, ME 04046.