Legal
Subprocessors
Sarojah Technologies Limited (“we”, “us”, “our”) engages the third-party service providers listed below (“subprocessors”) to help deliver our services. Each is engaged under a written contract with appropriate data-protection safeguards. This list supports our Privacy Policy and Terms & Conditions.
Last updated: October 2026
Current subprocessors
The table below lists the subprocessors currently engaged, their purpose, the categories of data they may process, and their processing region.
| Provider | Purpose | Data categories | Region |
|---|---|---|---|
OpenAI OpenAI, L.L.C. / OpenAI Ireland Ltd (EU) | AI language processing that powers the assistant (interpreting and responding to customer messages). Accessed directly via the OpenAI API. | Conversation content submitted to the assistant. | USA / EU (API data not used to train models per OpenAI's API terms) |
Telnyx Telnyx LLC | Telephony for the voice agent: inbound/outbound call connectivity, call media, and call recordings where enabled. | Caller phone number, call audio, call metadata. | USA / EU |
Retell AI Retell AI, Inc. | Voice-agent orchestration and speech transcription, where the Retell voice engine is used. | Call audio, transcripts, call metadata. | USA |
Supabase Supabase, Inc. | Primary database and file storage: customer records, conversation data, bookings, and uploaded documents/attachments. | Account data, leads, conversation and booking records, uploaded files. | EU (project region) |
Railway Railway Corp. | Backend application hosting and processing (the API that runs the service). | All data processed in transit by the application. | EU / USA (per deploy region) |
Vercel Vercel Inc. | Frontend / website hosting and request handling for the web application and portal. | Website requests, form submissions in transit, technical/log data. | USA / EU (edge) |
Cloudflare Cloudflare, Inc. | DNS, CDN, TLS, and security / bot-protection in front of our services. | IP address, request metadata, technical/log data. | Global (edge network) |
Meta / WhatsApp Meta Platforms Ireland Ltd | WhatsApp Business messaging where the customer uses the WhatsApp channel. | WhatsApp message content, sender phone number. | EU / USA |
Google Ireland Ltd | Calendar and email integrations for connected business accounts (Google Calendar event sync; Gmail send of booking confirmations), limited to the calendar.events and gmail.send scopes. | Booking/calendar event details, free/busy times, confirmation emails. | EU / USA |
Stripe Stripe Payments Europe, Ltd (EU) / Stripe, Inc. (US) | Subscription and payment processing. Stripe captures and stores card details directly; Sarojah never receives card data. For payment activities Stripe generally acts as an independent controller/processor under its own terms, not solely as our subprocessor. | Billing contact, payment/subscription metadata (no card data held by Sarojah). | EU / USA |
Email delivery (SMTP relay) Configured email/SMTP provider (e.g. Google Workspace / Gmail SMTP) | Transactional email delivery: notifications, acknowledgements, booking confirmations, and set-password / invitation emails. | Recipient email address and email content. | EU / USA (per provider) |
International data transfers
Some subprocessors may process data outside the European Economic Area (EEA). Where they do, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision (including the EU–US Data Privacy Framework, where the provider is certified).
A note on Stripe
Stripe processes subscription and card payments. It captures and stores card details directly; Sarojah never receives or stores your card number. For payment processing, Stripe generally acts under its own terms as an independent controller/processor for certain activities rather than solely as our subprocessor. We list it here for transparency about who is involved in delivering the service.
Changes to this list
We may add or replace subprocessors as our services evolve. When we make a material change to this list, we will update the “Last updated” date above and, where required by our customer agreements, provide notice through the normal channels.
Questions
For questions about our subprocessors or data processing, contact us at hello@sarojah.com.
Sarojah Technologies Limited · Registered in Ireland · Company No. 824028