How the call-processing chain works
A Penny business customer generally controls the caller information it asks Penny to process. Penny processes that information for the business. Penny uses Vapi for voice-service orchestration and live-call handling, and OpenAI Realtime is used through that voice-service integration to conduct the conversation. Penny separately uses infrastructure providers for accounts, storage, hosting, payments, and optional integrations.
Current providers
Vapi, Inc.
- Service
- Voice-service orchestration, telephone-number provisioning, and live-call handling.
- Data involved
- Business instructions, agent configuration, caller audio, call metadata, transcripts, summaries, and caller details as configured by the customer.
- Relationship
- Direct Penny subprocessor.
OpenAI, L.L.C. / OpenAI Ireland Ltd.
- Service
- Realtime AI model and voice processing used to conduct configured calls.
- Data involved
- Caller audio, business instructions, conversation context, and model output needed during a call.
- Relationship
- Engaged through the voice-service processing chain.
Supabase, Inc.
- Service
- Database, account authentication, and session management.
- Data involved
- Account details, workspace membership, business configuration, agent records, call records, and authentication data.
- Relationship
- Direct Penny subprocessor.
Vercel Inc.
- Service
- Application and website hosting, delivery, and operational logs.
- Data involved
- Application requests, IP address, device and browser information, and limited account or service data present in requests and logs.
- Relationship
- Direct Penny subprocessor.
Stripe, Inc.
- Service
- Subscription billing, payment processing, invoicing, and fraud prevention.
- Data involved
- Customer and billing contact details, subscription and transaction information, payment method details, and fraud-prevention signals.
- Relationship
- Penny service provider; Stripe may also act as an independent controller for certain payment activities.
Google LLC
- Service
- Optional Google sign-in and connected Google services, plus delivery of website fonts.
- Data involved
- Account identifiers and profile details when Google sign-in is selected; connected-service data when authorized; device and network information for font delivery.
- Relationship
- Penny service provider or customer-authorized integration, depending on the feature.
Customer-selected integrations
If a customer connects a calendar, CRM, telephone carrier, or another third-party service, Penny sends data to that service only as authorized by the customer. The connected provider may process information under its own agreement and privacy terms.
Changes and questions
We will update this page before a new provider begins materially processing customer personal information. Customers that require direct notice of subprocessor changes may contact us to arrange it through applicable data-processing terms.
For privacy, security, or data-processing questions, email privacy@pennysdesk.com.