How we use service providers
A business customer generally controls the caller information it asks PennyAI LTD to process. We process that information for the business with the support of the providers listed below. The information each provider processes depends on the features you use. We require providers to protect personal information under applicable agreements and data-protection requirements.
AI processing of connected calendar data
Connected calendar data is protected by our no-training commitment. Google Workspace data, including raw, aggregated, anonymized, and derived data, is not used, sold, or transferred to develop, train, fine-tune, or improve generalized or foundational AI or machine learning models.
Calendar availability and booking results are shared with our AI provider to answer calls and arrange authorized appointments. This information may also appear in call records and customer notifications handled by the relevant providers below. Calendar access credentials are not shared with AI models. Our no-training restrictions apply to the providers that process Google Workspace data.
Providers may retain data for service operation, security, and legal compliance under their applicable terms. The Limited Use and no-training restrictions continue to apply to retained Google Workspace data and its derivatives. Our Privacy Policy explains these commitments, retention, and your choices.
Current providers
Google Ireland Limited (Google Analytics)
- Service
- Consent-based website and app analytics, campaign attribution and conversion measurement.
- Data involved
- Pseudonymous browser, session, account and transaction identifiers; sanitized page paths and campaign parameters; device, approximate location and interaction information; signup and subscription conversion details. No form contents or call data.
- Relationship
- Analytics processor for PennyAI LTD under the Google Ads Data Processing Terms; processing may occur outside the UK and EEA.
LiveKit Incorporated
- Service
- Voice service hosting, call handling, and optional call recording.
- Data involved
- Business and receptionist settings, call audio and metadata, conversation content, calendar availability and appointment information, and optional recordings.
- Relationship
- Direct subprocessor of PennyAI LTD.
Twilio Inc.
- Service
- Telephone services and text-message delivery.
- Data involved
- Phone numbers, call audio and metadata, and message content, including appointment information when present.
- Relationship
- Direct subprocessor of PennyAI LTD.
OpenAI, L.L.C. / OpenAI Ireland Ltd.
- Service
- AI voice assistance, appointment assistance, call summaries, and business information processing.
- Data involved
- Call audio and transcripts, business information and instructions, conversation content, calendar availability and booking results (including derived Google Workspace data), generated responses, and public business listing and website content.
- Relationship
- Direct subprocessor of PennyAI LTD.
Supabase, Inc.
- Service
- Account authentication and data storage.
- Data involved
- Account and workspace information, business settings, call and appointment records, calendar connection information and encrypted credentials, optional recordings, and authentication data.
- Relationship
- Direct subprocessor of PennyAI LTD.
Vercel Inc.
- Service
- Website and application hosting and operation.
- Data involved
- Account and business information, call and calendar information, application requests, IP addresses, device and browser information, and service diagnostics.
- Relationship
- Direct subprocessor of PennyAI LTD.
Stripe, Inc.
- Service
- Subscription billing, payment processing, invoicing, and fraud prevention.
- Data involved
- Customer and billing contact details, subscription and transaction information, payment method details, and fraud-prevention signals.
- Relationship
- Service provider to PennyAI LTD; Stripe may also act as an independent controller for certain payment activities.
Resend, Inc.
- Service
- Service email delivery.
- Data involved
- Recipient email addresses and notification content, including call summaries, transcript excerpts, caller details, and appointment information when present.
- Relationship
- Direct subprocessor of PennyAI LTD.
Google LLC
- Service
- Optional Google sign-in, Google Calendar availability and appointment management, and delivery of website fonts.
- Data involved
- Account identifiers and profile details when Google sign-in is selected; connected account email, calendar availability, event identifiers, titles and times, and appointment details sent to Calendar when authorized; device and network information for font delivery.
- Relationship
- Service provider to PennyAI LTD or customer-authorized integration, depending on the feature.
Customer-selected integrations
If a customer connects a calendar, CRM, telephone carrier, or another third-party service, we send data to that service only as authorized by the customer. The connected provider may process information under its own agreement and privacy terms.
Changes and questions
We will update this page before a new provider begins materially processing customer personal information. Customers that require direct notice of subprocessor changes may contact us to arrange it through applicable data-processing terms.
For privacy, security, or data-processing questions, email privacy@pennysdesk.com.