Subprocessor List
1. What this list is
To run Closelio we rely on a small number of other companies ("subprocessors") that may store or process personal data on our behalf, including data about your contacts. This page lists every one of them, what we use them for, what kind of data they handle, and where that processing happens.
We choose these vendors for security and reliability, and we bind each of them to data-protection terms at least as protective as the ones in our Data Processing Addendum.
2. Current subprocessors
| Subprocessor | What we use it for | Data it handles | Where |
|---|---|---|---|
| Twilio Inc. | Phone numbers, text messages, phone calls, call recording, A2P 10DLC brand and campaign registration, verification codes | Contact and user phone numbers, message content, call audio and recordings, business registration details | United States |
| ElevenLabs Inc. | AI voice agents that speak on calls | Call audio, conversation content, contact details the voice agent uses during a call | {{TODO: confirm processing region}} |
| Deepgram Inc. | Converting call audio to text | Call audio and transcripts | United States |
| OpenAI, L.L.C. | Writing AI text replies, summaries and the in-app assistant | Message and call content, lead details included in prompts | United States |
| Stripe, Inc. | Subscription billing and payments | Billing name, email, payment card details (held by Stripe, not by us), invoices | United States |
| Neon Inc. | Primary database | All account and customer data stored in Closelio | United States (AWS us-east-1) |
| Render Services, Inc. | Application servers and background jobs | All data processed by the Closelio application | United States (Virginia) |
| Vercel Inc. | Hosting the Closelio website and web app | Browser requests, IP addresses | Global edge network |
| Cloudflare, Inc. | DNS, content delivery and network protection | IP addresses, request metadata, traffic passing through our domains | Global network |
| Upstash, Inc. | In-memory cache and job queues | Short-lived copies of application data, such as session and queue records | {{TODO: confirm Upstash region}} |
| Google LLC | Google sign-in, Google Calendar sync, sending email through Google Workspace | Name, email, calendar events you sync, email content we send you | United States |
| Resend, Inc. | Sending email (backup sender) | Email addresses and email content | United States |
| Functional Software, Inc. (Sentry) | Error monitoring | Error reports, which may include user IDs, IP addresses and fragments of request data | United States |
| Slack Technologies, LLC | Internal alerts to our team, such as new signups, A2P status and compliance flags | Account name and email, workspace details, A2P status | United States |
| Meta Platforms, Inc. | Only if you connect Facebook or Instagram lead ads: receiving your leads and reporting conversions back | Lead form answers, contact details, conversion events | United States |
3. Changes to this list
When we add or replace a subprocessor, we update this page and give at least 30 days' notice in the app before the new subprocessor starts handling your data. If you have a reasonable data-protection objection, email privacy@closelio.ai within that 30-day period. If we can't resolve it, you may end the affected service as described in the Data Processing Addendum.
4. Questions
Email privacy@closelio.ai.
All versions: 2026-10-16.1