Snapshot 21055
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Sub-processors Every vendor that touches your data We use 34 sub-processors across infrastructure, AI, payments, email, and messaging. This page is the canonical list - what each does, what they see, and where they operate. How sub-processors work in Spun Always-on sub-processors handle core infrastructure (hosting, payments, WhatsApp gateway, email). Optional sub-processors are engaged only when you enable the corresponding feature (for example, specific AI providers). PII redaction (Maximum preset) and the master AI kill switch let you eliminate AI providers entirely. We notify customers in advance of material changes to this list as required by our Data Processing Agreement. To receive update notifications, email [email protected] with subject "Subprocessor updates". Infrastructure & hosting Run the servers, store the data, and route the traffic that powers Spun. Sub-processor Purpose Data accessed Region Hetzner Online GmbH Privacy policy Purpose Primary application servers and PostgreSQL database Data accessed All Spun data at rest for organisations homed on the EU cell Region Nuremberg, Germany (EU) Cloudflare, Inc. Privacy policy Purpose CDN, load balancer, WAF, DDoS protection, R2 object storage, TURN servers, Pages hosting Data accessed Encrypted HTTPS traffic; media binaries in R2; encrypted relay packets on TURN Region Global edge (PoPs near user) netcup GmbH Privacy policy Purpose Regional cell servers (US region) and self-hosted real-time media nodes Data accessed Spun data at rest for organisations homed in the US region; real-time audio and video relayed by the self-hosted media nodes Region Nuremberg, Germany (EU) and Manassas, Virginia (US) WhatsApp gateway Provides the API connection between Spun and WhatsApp. Sub-processor Purpose Data accessed Region Whapi.cloud Privacy policy Purpose WhatsApp Business API gateway, including its regional connections: in countries where the gateway has one, a new WhatsApp connection without Self Proxy reaches WhatsApp through a connection of the gateway itself in the country you confirm (the "Spun connection" on the connect screen) Data accessed All inbound/outbound WhatsApp message content, contact phone numbers, media Region EU / Cyprus; regional connection exit in the country you confirm, where available AI providers Process messages for AI features when enabled. Disable via your AI settings or PII redaction presets - see the Privacy Overview. Sub-processor Purpose Data accessed Region OpenAI, LLC Privacy policy Purpose AI compose, improve, summaries, smart replies, classification, search embeddings, Weave assistant, Whisper transcription, text-to-speech Data accessed Message content (or PII-redacted version) per request. Not used to train OpenAI's models. Region United States Anthropic, PBC Optional Privacy policy Purpose Alternative large-language-model provider for AI text features, selected by configuration in place of OpenAI Data accessed The message content sent with that request (or its PII-redacted version). Not used for model training. Region United States Sofer.ai Optional Privacy policy Purpose Hebrew speech-to-text (the default transcription provider for Hebrew audio) Data accessed Audio file content per request Region United States AssemblyAI Optional Privacy policy Purpose Long-form audio transcription with speaker diarization (the provider used when a recording needs speakers told apart) Data accessed Audio file content per request Region United States Deepgram Optional Privacy policy Purpose Speech-to-text (Nova-3) Data accessed Audio file content per request Region United States Groq, Inc. Optional Privacy policy Purpose Speech-to-text (Whisper large-v3-turbo) when the Groq provider is chosen for a transcription Data accessed Audio file content per request Region United States Speechmatics Optional Privacy policy Purpose Speech-to-text (specialty languages) Data accessed Audio file content per request Region United Kingdom / EU Google Cloud (Speech-to-Text and Text-to-Speech) Optional Privacy policy Purpose Speech-to-text fallback, and text-to-speech for standard voices Data accessed Audio file or text per request Region United States / global Microsoft Azure (Cognitive Services Speech) Optional Privacy policy Purpose Fallback STT and TTS for specialty languages and dialects Data accessed Audio file or text per request Region EU / US (configurable) Sarvam AI Optional Privacy policy Purpose Indian-language STT, TTS and translation Data accessed Audio or text content per request Region India ElevenLabs Optional Privacy policy Purpose High-quality text-to-speech Data accessed Text content per request Region United States / EU Speechify Optional Privacy policy Purpose Text-to-speech voices Data accessed Text content per request Region United States Voice & video Handle the live media for calls. Sub-processor Purpose Data accessed Region LiveKit Cloud Privacy policy Purpose SFU for group calls and translation rooms with 3+ participants, and server-side recording of a meeting when a host turns recording on Data accessed Live audio/video media (decrypted by SFU to forward - see Encryption page). When a host records, the same media is composited into a recording file. Region United States / global Cloudflare TURN Privacy policy Purpose NAT-traversal relay for 1:1 WebRTC calls when direct P2P fails Data accessed Encrypted DTLS-SRTP packets only - TURN cannot decrypt media Region Global edge Phone & SMS Used for phone verification, invitation SMS delivery, and phone calls on a number an organisation has connected. Sub-processor Purpose Data accessed Region TextGrid Privacy policy Purpose SMS delivery for invitation and verification messages sent from Spun-operated numbers Data accessed Recipient phone number and the text of the message at moment of send Region United States VitalPBX Purpose Self-hosted SIP PBX for voice OTP delivery Data accessed Phone number, OTP code at moment of call Region Self-hosted (Spun-owned, US data center) BulkVS Privacy policy Purpose SIP trunk for outbound voice OTP delivery Data accessed Phone number, OTP code at moment of call Region United States Twilio (Programmable Voice) Optional Privacy policy Purpose Carries inbound and outbound phone calls on the Twilio number an organisation connects, and records a call when call recording is on Data accessed Calling and called phone numbers, call timing, duration and status, the live call audio, and the recording Twilio holds until Spun downloads it into R2. A separate engagement from the SendGrid email entry. Region United States / global Authentication & push Sign-in providers and mobile push notifications. Sub-processor Purpose Data accessed Region Google (Gmail send, your own account) Optional Privacy policy Purpose Sending email from your own Gmail address, one recipient at a time, when you connect your Google account Data accessed The message you send and its recipient. Google is your own email provider here: Spun sends through your account with your consent, and the send scope cannot read your mailbox. Region United States / global Google (Sign-In with Google) Privacy policy Purpose OAuth identity provider for sign-in Data accessed Name and email at sign-in. We do not access Drive, Gmail, Calendar, or Contacts. Region United States Firebase Cloud Messaging (Google) Privacy policy Purpose Push notifications for incoming messages and calls Data accessed Device push token, notification title/body (no message body unless the user enabled previews) Region United States Payments & billing Process subscription payments. Card data never reaches Spun servers. Sub-processor Purpose Data accessed Region Stripe, Inc. Privacy policy Purpose Payment processing, subscriptions, invoicing, Stripe Connect for affiliate payouts Data accessed Customer name, billing email, billing address, card data (collected directly by Stripe Elements) Region United States (with EU data residency for EU customers) Email & support Send transactional email and provide in-app live chat support. Sub-processor Purpose Data accessed Region SendGrid (Twilio) Privacy policy Purpose Transactional email: invitations, password resets, confirmation codes, notifications. Also receives replies to email you send from Spun, on a receive-only domain that cannot send. Data accessed Recipient email, message body for the specific email. For inbound replies: the sender address, the message body and any attachments, plus the authentication results the receiving domain reports. Region United States Chatwoot Optional Privacy policy Purpose Embedded live-chat widget on marketing site and in-app help Data accessed Chat messages with our support team, browser metadata Region EU / US (configurable) WhatsApp routing (proxies) Carry the WhatsApp session from the WhatsApp gateway to WhatsApp through one of three routes: the regional connection of the gateway itself in the country you confirm (listed under WhatsApp gateway above), a temporary residential connection in that country where the gateway has no regional connection, or the computer running your Self Proxy. Media downloads and uploads do not use these routes: they travel between the WhatsApp gateway and WhatsApp directly. Sub-processor Purpose Data accessed Region Spun relay servers (Self Proxy) Optional Purpose Self-operated relay servers that carry Self Proxy WhatsApp connections between the WhatsApp gateway and the computer running your Self Proxy - the relay closest to that computer is used Data accessed TLS-encrypted WhatsApp gateway traffic only; relayed in real time, never stored Region Nuremberg, Germany (EU) and Manassas, Virginia (US) Infatica Purpose Residential proxy network for the temporary WhatsApp connection: in countries where the WhatsApp gateway has no regional connection, new connections without Self Proxy reach WhatsApp through a residential internet address in the country you confirm when connecting. Not used for organisations on Self Proxy or on a regional connection of the gateway Data accessed Encrypted WhatsApp session traffic and the connection metadata needed to carry it (addresses, timing, volume); no readable message content and no media transfers Region Exit in the country you confirm when connecting (global residential network) Monitoring & reliability Track errors, monitor uptime, and aggregate operational logs. Operational logs include contact phone numbers, which we retain deliberately so support and engineering can trace a specific conversation. Credentials and email addresses are redacted before transmission, and message content is not routinely logged. Sub-processor Purpose Data accessed Region Axiom, Inc. Privacy policy Purpose Centralised aggregation of server and container logs across our infrastructure Data accessed Operational log lines: timestamps, host and service names, request paths, error messages and stack traces, and contact phone numbers where they appear in an operational event. Credentials and email addresses are redacted before the logs leave our servers, and message content is not routinely logged. Retained for 30 days. Region EU (Frankfurt, eu-central-1) Analytics Usage analytics and session replay, on the marketing site and inside the Spun app. Marketing-site capture is consent-gated; in the app it runs on every session, with session replay limited to desktop. Sub-processor Purpose Data accessed Region Google Analytics Optional Privacy policy Purpose Marketing-site visitor analytics (spun.com and country variants) Data accessed Anonymized page views and click events on marketing pages only Region United States PostHog Privacy policy Purpose Product analytics and session replay, on the marketing site and in the Spun app Data accessed Page views, clicks and navigation events, browser and device metadata; for a signed-in app user also their name, email, role and organisation name and id. Session replay records the interface as it is displayed, so message content on screen can appear in a recording. Replay is off on mobile devices in the app. On the marketing site nothing is captured once a visitor declines cookies, and capture before a choice is cookieless. Region EU (PostHog EU Cloud, eu.posthog.com) Contact enrichment Look up a public professional profile for one saved contact, only when a user explicitly asks for that contact. No message content is ever sent, and no list of your contacts is uploaded. Sub-processor Purpose Data accessed Region People Data Labs Optional Privacy policy Purpose Professional profile lookup for a single contact, per explicit user request (Contact Intelligence) Data accessed The name and phone number of one contact per request, plus the country of that phone number. Never message content, never your contact list. Region United States Need a signed DPA? Our Data Processing Agreement is GDPR-aligned, includes EU Standard Contractual Clauses for international transfers, and covers all sub-processors listed above. Email [email protected] to request a copy. See the security overviewBack to privacy overview