Service providers and subprocessors
Effective and last updated: September 14, 2026
Providers and their functions
This directory identifies the providers supported by Spikey AI and the data involved when the relevant feature is used. A provider may be a subprocessor for one function and an independent controller for another, such as communications-network operation, fraud prevention, administering its own account, meeting financial regulatory duties or providing your connected calendar account. Twilio, Sinch (Mailgun) and Stripe have independent processing functions described in their applicable terms and notices. Public privacy links explain the provider's practices and do not replace the processing agreements governing Spikey AI's use.
Supabase
Database, authentication and backend functions
Account and business records, call transcripts and metadata, messages, encrypted calendar credentials, usage, consent and privacy records.
Vercel
Website and application hosting
Browser requests, IP and device information, session/request data and application content processed through the hosted service.
ElevenLabs
AI voice conversation and transcription
Live voice, call identifiers, conversation text, business instructions, relevant availability and tool results. Its configured AI services, including Google Gemini, receive relevant content.
Google Gemini (via ElevenLabs)
Downstream language model for voice-agent responses
Conversation text, business instructions, relevant availability and tool results supplied through ElevenLabs. This AI processing is separate from the optional Google Calendar connection.
OpenAI
Business research and follow-up extraction
Business name/location or website for public research; conversation text to identify requested actions and caller details.
Twilio
Phone numbers, inbound calls, consent gateway and optional SMS
Telephone numbers, call routing and metadata, live call audio in transit, keypad consent, SMS message content and delivery/opt-out information.
Mailgun
Transactional email delivery
Recipient addresses, sender information, account/security and billing communications, generic callback notices with dashboard links, and delivery metadata. Callback notices do not include caller details or conversation content.
Stripe
Checkout, subscriptions and payments
Customer/account identifiers, contact and billing details, selected plan, payment details entered into Stripe, transaction and usage charge information. Call transcript content is not sent for billing.
Google (optional)
Connected Google Calendar
Authorization exchanges, calendar selections and free/busy queries. Enabled only when you connect an account.
Microsoft (optional)
Connected Microsoft Calendar
Authorization exchanges, calendar selections and event timing/availability queries. Enabled only when you connect an account.
Locations and downstream processing
Providers use infrastructure, personnel and downstream providers in multiple countries. This directory does not promise that all processing remains within the United States or a particular state. Region, retention and downstream AI processing depend on the service and configuration. Ask us for the applicable processing locations and contractual information before providing data subject to a residency or sector restriction.
Changes and questions
We maintain this list and provide affected business customers advance notice of subprocessor additions or replacements and an opportunity to object as described in the Data Processing Addendum. Contact SVA Products, LLC, 169 Madison Ave, New York, at hello@spikeyai.com for questions, an objection or processing information.