Sub-processors
The third parties LEAD SIGNAL AI TECHNOLOGIES LIMITED uses to process personal data on behalf of its customers, what each one does, and where it processes data. This list forms part of our Data Processing Agreement.
Current sub-processors
| Provider | Purpose | Data involved | Location | |
|---|---|---|---|---|
| Render Services, Inc. | Application hosting and the PostgreSQL database that holds all account, lead and conversation data | All service data | United States (Oregon) | Terms |
| Cloudflare, Inc. | DNS, CDN, DDoS protection and object storage (R2) for uploaded files and media | Web traffic metadata; uploaded files and images | Global edge network; storage in the EU | Terms |
| OpenAI, L.L.C. | AI models that score leads, summarise conversations and draft replies | Conversation text, lead names and handles, your training answers | United States (API, no training on your data) | Terms |
| Stripe Payments Europe, Ltd. | Subscription billing and card processing (card data never touches LeadSignal) | Account holder name, email, billing address, payment method (held by Stripe) | EU / US | Terms |
| Resend, Inc. | Transactional and platform email (sign-in codes, notifications, nurture emails sent from your connected address where applicable) | Recipient email addresses and message content | United States | Terms |
| Twilio Inc. | SMS and WhatsApp message delivery where you take a number through LeadSignal | Phone numbers and message content | US / EU | Terms |
| Meta Platforms Ireland Ltd. | Instagram and Facebook comments, direct messages and WhatsApp, where you connect them | Commenter and sender names, handles, message content, post identifiers | EU / US | Terms |
| Google LLC | Gmail, Google Calendar and YouTube connections where you enable them; Google Analytics on the marketing site only | Mailbox and calendar data within the scopes you approve; YouTube comment data; site analytics | EU / US | Terms |
| Microsoft Ireland Operations Ltd. | Outlook / Microsoft 365 mailbox and calendar connections where you enable them | Mailbox and calendar data within the scopes you approve | EU | Terms |
| LinkedIn Ireland Unlimited Company | LinkedIn Company Page comments, publishing, lead-gen forms and ad reporting where you connect them | Commenter names and comment text, form submissions, campaign metrics | EU / US | Terms |
| MillionVerifier | Email address verification before outreach | Email addresses only | EU | Terms |
| fal.ai (Features and Labels, Inc.) | Image and video generation for the marketing tools, only when you use them | The prompts and images you submit | United States | Terms |
| Xero Limited | Invoicing and accounting for LeadSignal's own billing records | Customer business name, billing contact, invoice amounts | NZ / global | Terms |
Connected platforms (Meta, Google, Microsoft, LinkedIn) only receive or supply data where you connect the account concerned; each connection is optional and can be removed from Integrations at any time.
Changes to this list
We give customers at least 30 days' notice before adding or replacing a sub-processor that will process their personal data, by email to the account owner and by updating this page. If you object on reasonable data-protection grounds and we cannot resolve it, you may terminate the affected service under the Data Processing Agreement.
To be notified of changes, email privacy@lead-signal.ai with the subject "Sub-processor updates".
Our own infrastructure
LeadSignal's application and primary database run on Render in the United States (Oregon). Uploaded files and media are stored on Cloudflare R2. The database has seven-day point-in-time recovery provided by the hosting platform.