Legal · Providers
Sub-processor Notice
Effective and last updated: 30 August 2026
The following providers may process personal data when the corresponding TradieDial feature is configured. A provider listed as “when configured” receives no Customer Personal Data merely because it appears here.
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database, authentication support, audit records and private file storage | Customer, caller, job, account and security data |
| Vercel | Hosting, server functions, security, aggregate public-page analytics and performance telemetry | Hosted content, request/security logs and aggregate public-page telemetry |
| Vapi | AI call orchestration and telephony workflow | Call audio, number, instructions, transcript and tool results |
| Twilio | Telephone numbers, voice transport and SMS | Phone numbers, call/message routing and message content |
| OpenAI | Configured language-model processing for call and executive-assistant features | Prompts, transcripts or business context required for the selected feature |
| Anthropic | Configured language-model processing for outreach classification, drafting or executive-assistant features | Relevant approved prospect, message or business context |
| Deepgram | Speech-to-text when configured | Call audio and transcript output |
| Microsoft Azure | Speech recognition or voice fallback when configured | Call audio and generated speech |
| ElevenLabs | Synthetic voice when configured | Text to be spoken and voice settings |
| Cal.com | Appointment scheduling | Name, contact details, address/service note and appointment data |
| Mailforge (Salesforge OÜ) | Outreach mailbox/domain infrastructure, SMTP delivery and IMAP reply/bounce ingestion | Mailbox identity and credentials, sender/recipient addresses, message content and delivery/reply metadata |
| Bouncer | Business-email verification when explicitly configured | Email address and verification result |
| Google Maps Platform / Places | Business discovery, place details, geocoding and map links when configured | Business names, public business contact/location details and search queries |
| OpenStreetMap Nominatim and CARTO | Address geocoding and internal map tiles when configured | Address search query, map request, IP and browser request metadata as applicable |
| Cloudflare | Bounded recurring scheduler and edge/network services | Scheduled endpoint, timing, response status and bounded operational results |
| Resend | Transactional service email when configured | Recipient, subject, message and delivery metadata |
| PayPal | Subscription checkout, billing status, refunds and payment events | Customer identity, subscription and transaction metadata |
Locations and transfers
Providers may operate from the UK, EEA, United States and other locations described in their service terms. TradieDial uses applicable adequacy arrangements, Data Privacy Framework participation, EU Standard Contractual Clauses, UK Addendum or IDTA, and transfer assessments where required. Iceland is in the EEA and is recognised as adequate by the UK.
Changes and objections
Material new sub-processors are notified under the DPA, normally at least 15 days before they begin processing Customer Personal Data. Customers may object on reasonable data-protection grounds by emailing support@tradiedial.com.
Independent controllers
Payment providers, telecommunications carriers, regulators and some integration providers may act as independent controllers for limited data they process under their own legal duties. Their privacy notices govern that independent processing.