OverFlow

Legal

Subprocessors

Third parties that process personal information on our behalf to provide OverFlow, per our Data Processing Agreement. We bind each to service-provider restrictions and will update this page before adding or replacing a subprocessor.

Last updated July 29, 2026

SubprocessorFunctionPersonal information involved
SupabaseDatabase hosting and authentication (multi-tenant Postgres)All stored caller and staff data
VercelApplication hosting / infrastructureData in transit; logs
TwilioInbound voice, call-recording transport, SMS (A2P 10DLC)Phone numbers, recordings, SMS content
RetellVoice-AI agent orchestrationAudio and transcript (real time)
Retell's LLM providerLarge-language-model inference used by the voice agentTranscript / call content sent for inference
StripePayment processing (tokenized cards)Customer billing data (not caller data)
ResendTransactional email (alerts, receipts, daily digest)Staff email addresses; lead summaries
Expo (Expo Application Services)Mobile push relay for the OverFlow companion appDevice push tokens; alert content for lead, voicemail, inbound-referral and emergency notifications (caller name, callback number, problem/message summary)
Apple Push Notification serviceOS-level push delivery to iOS devicesDevice push tokens; alert content as above
Google Firebase Cloud MessagingOS-level push delivery to Android devicesDevice push tokens; alert content as above
Google Maps Platform (Geocoding API)Geocoding property addresses to coordinates (primary when configured), and interactive map display in the customer dashboard (loads Google scripts and cookies in the signed-in dashboard)Property address / ZIP
OpenStreetMap NominatimGeocoding property addresses to coordinatesProperty address / ZIP

Questions? Email admin@overflowvoice.com.