Legal
Sub-processors
Last updated 11 October 2026
These are the companies that process personal information on our behalf to run Revvox. Each one is bound by data-protection terms no weaker than our data processing terms, and we remain responsible to you for what they do. Suppliers marked as used only when you connect them see nothing until you do.
| Sub-processor | Purpose | Data | Region |
|---|---|---|---|
| ElevenLabs | Runs the voice agent: speech recognition, speech synthesis and call recordings | Call audio, transcripts, the phone number dialled, lead details the agent needs on the call | United States, or India for workspaces with India data residency switched on |
| Plivo | Telephony: places and carries calls | Phone numbers, call audio in transit, call metadata | Global |
| Twilio | Alternate telephony provider | Phone numbers, call audio in transit, call metadata | United States |
| OpenAI | Call analysis, call summaries and reading uploaded documents | Transcripts, extracted answers, documents you upload | United States |
| Anthropic | The in-app assistant, and drafting chatbots, workflows and agent wording when you ask it to | Messages and descriptions you send, and the context needed to answer them | United States |
| Meta Platforms | Lead forms, WhatsApp messages and conversion events | Lead form answers, WhatsApp message content, and for conversion events only Meta's own lead ID | Global |
| Google Ads conversions, Google Sheets when connected, Google Tag Manager on this website, and the sheet that stores early-access sign-ups | The ad click ID (gclid) and sale value for conversions; sheet rows you choose to sync; website visit data; what you type in the early-access form | Global | |
| Resend | Sends account emails: sign-up verification, password reset and team invitations | Recipient email address, the email's subject and content, delivery and bounce events | United States |
| HubSpot | CRM sync, only when you connect it | Lead and call outcome records you choose to sync | United States |
| GoHighLevel | CRM sync, only when you connect it | Lead and call outcome records you choose to sync | United States |
| Razorpay | Billing and payments | Billing name, email, phone and payment details (we do not store full card numbers) | India |
| Amazon Web Services | Object storage for documents and media | Candidate videos, ID photos, uploaded files (call recordings stay with the voice provider and are streamed on request) | India (Mumbai, ap-south-1) |
| MongoDB Atlas | Primary database | Account, lead, call and transcript records | India (Mumbai) |
| Vercel | Hosts this website | Website visit data such as IP address and pages requested | Global |
Changes to this list
We give customers notice before we add or replace a sub-processor, by email to the account owner and by updating the date at the top of this page. The notice period is 30 days. If you reasonably object on data-protection grounds, you may end the affected part of the service without penalty.
Questions: hello@revvox.io. See also our privacy policy and security page.