1. Current sub-processors
ConvoAI, operated by Serverlys, uses the following third parties to provide the Service. Each processes personal data only to perform its function for us, under its own terms and our data processing agreement.
| Sub-processor | Purpose | Location | Data processed |
|---|---|---|---|
| OpenAI, L.L.C. | AI model inference for replies on paid plans; embeddings for knowledge search | United States | Message content, conversation context, knowledge excerpts, contact details needed to answer |
| DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.) | AI model inference for Essentials-plan replies and background conversation analysis | People's Republic of China | Message content, conversation context, knowledge excerpts, contact details needed to answer |
| Meta Platforms, Inc. | WhatsApp, Instagram and Messenger messaging (when you connect these channels) | United States / global | Messages and identifiers of customers on those channels |
| Resend, Inc. | Sending and receiving email (account emails, the email channel) | United States | Email addresses and message content |
| PayPal, Inc. | Payment processing (ConvoAI subscriptions, through the Serverlys client area) | United States | Billing contact and payment details |
| Retell AI | AI voice calls (Enterprise, only when AI Phone is enabled) | United States | Call audio, transcripts and phone numbers |
| Hosting provider of our servers | Application and database hosting | See DPA | All Service data, encrypted in transit |
| Serverlys (WHMCS billing) | Orders, invoices and account provisioning | United States | Account and billing details |
2. AI processing
AI replies are generated by the AI model provider for the workspace's plan. The conversation and the context the AI Employee needs to answer are sent to that provider for each reply. ConvoAI does not train AI models on your data.
3. Changes
We update this page when we add or replace a sub-processor. Questions: convoai@serverlys.com.