Subprocessors
This page lists the third-party subprocessors that Voice Outreach uses to operate the Service, what each one processes, and where that processing takes place. Every subprocessor is engaged under a written agreement that binds it to confidentiality and to processing the data only for the purpose described. This page supplements our Privacy Policy and forms part of our Data Processing Agreement.
1. Current subprocessors
| Subprocessor | Purpose | Data processed |
|---|---|---|
| Vercel | Application hosting and content delivery. | Request metadata, IP addresses, account identifiers. |
| Render | Hosting for background processing, including campaign sending, voice note generation, inbox sync, lead enrichment, and comment automation. | Campaign and lead records, message content and replies, voice audio, connected account identifiers. |
| Supabase | Primary application database and file storage. | Account data, campaign and lead records, stored audio and its metadata. |
| Upstash | Job queuing and scheduling for background processing, and switches that turn features off without a release. | Queued job details, including lead names, profile URLs, message text, and links to voice notes. |
| Cloudflare R2 | File storage for voice recordings, generated voice notes, and support attachments. | Voice samples recorded for cloning, uploaded and generated voice notes, screenshots and files attached to support requests. |
| Stripe | Payment processing and subscription billing. | Name, email, billing country, card token, last four digits, transaction history. |
| ElevenLabs | Speech synthesis for authorized voice profiles. | Voice sample audio, message text submitted for synthesis. |
| OpenAI | Text generation for message drafting, and for Find leads, turning your description into search filters and picking the best matches. | Prompt text, including the lead fields you choose to include. For Find leads, each match's professional details, without their name or profile URL. |
| Unipile | Messaging platform connectivity. | Connected account authorization, including your LinkedIn session cookie, browser user agent and IP address or country when you connect with our Chrome extension, message content, delivery and reply status. |
| Resend | Transactional email delivery. | Recipient email address and the contents of service emails. |
| Zoho Mail | Business email hosting for our support, legal, privacy, and billing addresses. | Correspondence you send to us. |
| Sentry | Error monitoring and diagnostics. | Error traces, which may include account identifiers and IP addresses. |
2. Data sources
Find leads gets business contact data from Blitz. We send Blitz only the search filters you set, never your personal data or your leads.
3. Where data is processed
Our primary application database is hosted in the United States. Other subprocessors may process data in the United States, the European Economic Area, or both, depending on the vendor and the service region in use.
Where personal data is transferred out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum where applicable, together with the supplementary measures described in our Data Processing Agreement. Per-vendor hosting regions and transfer documentation are available on request.
4. Changes to this list
Our subprocessors may change as we add, remove, or replace vendors. Before a new subprocessor begins processing customer personal data, we will update this page and give customers at least 30 days' notice by email to the address on the account, or by notice in the Service.
If you object to a new subprocessor on reasonable data-protection grounds, tell us within that notice period and we will work with you to find a resolution. If we cannot, you may terminate the affected subscription and receive a pro-rated refund for the unused portion of your current term, as described in our Refund Policy.
To be notified of changes to this page, email privacy@voiceoutreach.ai and we will add you to the notification list.
5. Certifications and attestations
We do not claim security certifications or compliance attestations of our own on this page. Where independent attestations apply, they are held by the listed subprocessors themselves and are available from those vendors.
6. Contact
Questions about our subprocessors can be sent to privacy@voiceoutreach.ai. We aim to respond within 1 business day.