Providers that process your data
The business that serves you is the controller of your data. Respondo provides the service to it as a processor and relies on the providers in this list, which process your data only on the business’s behalf and under the GDPR.
This list includes only the providers that process data of the business’s clients.
Supabase
- Category
- Hosting and storage
- What it does with your data
- Database and file storage holding your data, your messages and your documents (including this consent).
- Location
- EU (Dublin, Ireland)
- Data processing agreement
- View agreement
Twilio
- Category
- Messaging
- What it does with your data
- Sending and receiving SMS and calls between you and the business.
- Location
- United States (EU peering for EU-registered numbers)
- Data processing agreement
- View agreement
Meta Platforms Ireland Ltd. (WhatsApp)
- Category
- Messaging
- What it does with your data
- Sending and receiving WhatsApp messages between you and the business.
- Location
- Ireland (EU)
- Data processing agreement
- View agreement
Resend (Plus Five Five, Inc.)
- Category
- Messaging
- What it does with your data
- Sending the emails the business addresses to you: consent requests, your signed copy of the consent and invoices.
- Location
- United States
- Data processing agreement
- View agreement
Anthropic
- Category
- AI assistance, only if the business uses it
- What it does with your data
- AI assistance (summaries and follow-up suggestions) when the business uses these features; when the business asks its assistant about its clients, it also receives your name and contact details, your appointments, the amounts invoiced to you and excerpts of your messages. It does not use your data to train its models.
- Location
- United States
- Data processing agreement
- View agreement
OpenAI
- Category
- Assistant that reads and answers your messages
- What it does with your data
- Conversation assistant: reads the WhatsApp and SMS messages you send to the business and writes the replies. If the business uses AI features, it also transcribes voice notes. It does not train on this data and keeps it for at most 30 days before deletion.
- Location
- United States
- Data processing agreement
- View agreement
TypeSafe AI, Inc. (System One)
- Category
- Detection of requests to stop receiving messages, in the businesses where Respondo switches it on
- What it does with your data
- Detects, from the text of your message (without your name or phone number), whether you ask to stop receiving messages. It does not train on this data.
- Location
- United States
- Data processing agreement
- View agreement
Vercel
- Category
- Hosting and storage
- What it does with your data
- Hosting of the application and the pages you use (booking, consent signing).
- Location
- United States and EU
- Data processing agreement
- View agreement
Sentry
- Category
- Error monitoring
- What it does with your data
- Technical error reports, with what you type masked.
- Location
- EU
- Data processing agreement
- View agreement
Verifacti (Bilbabit, S.L.)
- Category
- E-invoicing (Verifactu), only if the business issues you an invoice
- What it does with your data
- Sends the Spanish Tax Agency the record of the invoices the business issues you, with your name and tax ID.
- Location
- EU (European Economic Area)
- Data processing agreement
- View agreement
ElevenLabs
- Category
- Missed-call voice answering by an artificial intelligence, only if the business switches it on
- What it does with your data
- Missed-call voice answering, only if the business switches it on: an artificial intelligence assistant answers when the business cannot pick up your call and helps you book an appointment. The call audio is not recorded; its transcript is kept.
- Location
- United States
- Data processing agreement
- Pending signature
Some are located in the EU and others in the United States; transfers outside the European Economic Area rely on the Standard Contractual Clauses adopted by the European Commission and, where applicable, on the EU-U.S. Data Privacy Framework. The exception is ElevenLabs (missed-call voice answering, in the United States), whose data processing agreement, including those clauses, is pending signature.
To exercise your rights, contact the business that serves you. For questions about these providers, write to privacidad@respondo.es.