PrativaniSubprocessors
Every third party that processes personal data on our behalf to deliver Prativani — what each one does, and where it operates.
1. About This List
A subprocessor is a company we engage to help deliver Prativani, which processes personal data in the course of doing so. Under our Data Processing Addendum you give general authorisation for us to engage them, and this page is the current list.
Each subprocessor is bound by a written contract imposing data-protection obligations no less protective than those in our DPA, and we remain responsible to you for their performance. We engage as few as we practically can.
2. Platform Subprocessors
These process personal data belonging to the people your business talks to — conversation content, contact records, calls and files.
| Subprocessor | What it does | Location |
|---|---|---|
| OpenAI | AI agent replies, conversation summaries and topic labels, knowledge-base embeddings, speech recognition and voice synthesis for AI calls | United States |
| Amazon Web Services (AWS) | Sending and receiving email for the email channel and email campaigns. Messages are processed and stored in the Asia Pacific (Mumbai) region | India |
| Brevo | Delivery of account email — sign-in codes, email verification, password resets, teammate invitations and export links. Separate from AWS above, which carries conversations and campaigns | European Union |
| Sentry | Error and performance monitoring. Receives diagnostic reports when something fails, which can include the account identifier and request details of whoever hit the error | United States |
| Twilio | Phone numbers, voice connectivity, and submission of regulatory documents where a market requires them | United States |
| Meta Platforms | WhatsApp, Facebook Messenger and Instagram messaging, where you connect those channels | United States |
| Cloudflare | Object storage for uploaded files, message attachments and call recordings | Global |
| Firecrawl | Crawling websites you point your knowledge base at, to import their content | United States |
| IPinfo | Resolving a visitor's IP address to an approximate city, region and country | United States |
| Google (Firebase) | Push notifications to your team's browsers and devices | United States |
3. Account and Infrastructure Subprocessors
These support the operation of the platform and your own account, rather than your customers' conversations.
| Subprocessor | What it does | Location |
|---|---|---|
| Stripe | Subscription payments, invoices and usage charges | United States |
| Google (reCAPTCHA) | Verifying that form submissions are not automated | United States |
| Google, Microsoft, GitHub | Single sign-on, only where you choose to use it | United States |
| Hostinger | Hosting the servers, databases and background workers the platform runs on | EU |
SMS delivery of one-time passcodes is not currently live. When we integrate an SMS provider it will be added to this table, with the notice described in section 5.
4. AI Providers and Training
Our AI subprocessors are engaged under API terms that prohibit them from training their models on the data we submit. Neither they nor we train models on your data or your customers' data. Content is sent to produce a response, and for no other purpose.
5. Changes to This List
We give at least 30 days' notice before adding or replacing a subprocessor that handles data belonging to the people your business talks to. To receive those notices, email [email protected] and ask to be added to the list.
If you reasonably object to a new subprocessor on data-protection grounds within that window, we will work with you on an alternative; if none is workable, you may terminate the affected part of the Service without penalty for the remainder of your paid term. This page is versioned independently of our other policies, so a change here does not mean our Privacy Policy has changed.
6. Questions
Vendor due-diligence questions, or a request for a signed DPA: [email protected].
Effective Date: September 26, 2026