Data Processors

Last updated: May 19, 2026 This document lists all sub-processors engaged in providing the itellico AI services, website operations, and business processes. All data processing occurs either on servers within the EU or is fully secured through Standard Contractual Clauses (SCCs), the EU-US Privacy Framework, or other appropriate guarantees pursuant to Art. 44-49 GDPR. This ensures a consistently high level of data protection.

Aspect	Details
Purpose of Processing	Hosting of cloud infrastructure for the itellico voice AI cluster platform, including compute, SIP communication services, CDN, and data storage.
Data Recipient	Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg.
Legal Basis	Contract performance (Art. 6 para. 1 lit. b GDPR).
Further Information	AWS Privacy Policy

Anthropic Ireland Limited

Aspect	Details
Purpose of Processing	Alternative AI processing (LLM): Processing of text queries through large language models (e.g., Claude series).
Data Recipient	Anthropic Ireland Limited, Dublin, Ireland.
Legal Basis	Contract performance (Art. 6 para. 1 lit. b GDPR).
Further Information	Anthropic Privacy Policy

Apple Distribution International Ltd.

Aspect	Details
Purpose of Processing	Social Login: Authentication and login of users via Apple accounts (“Sign in with Apple”).
Data Recipient	Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, T23 YK84, Ireland.
Legal Basis	Contract performance (Art. 6 para. 1 lit. b GDPR).
Further Information	Apple Privacy Policy

Cal.com, Inc.

Aspect	Details
Purpose of Processing	Online appointment scheduling for consultation meetings.
Data Recipient	Cal.com, Inc., USA.
Legal Basis	Pre-contractual measures (Art. 6 para. 1 lit. b GDPR).
Further Information	Cal.com Privacy Policy

Calendly LLC

Aspect	Details
Purpose of Processing	Online appointment scheduling for consultation meetings and demos.
Data Recipient	Calendly LLC, 271 17th St NW, Suite 1000, Atlanta, GA 30363, USA.
Legal Basis	Pre-contractual measures (Art. 6 para. 1 lit. b GDPR).
Further Information	Calendly Privacy Policy

Cartesia

Aspect	Details
Purpose of Processing	Alternative text-to-speech synthesis.
Data Recipient	Cartesia, Inc., San Francisco, CA, USA.
Legal Basis	Contract performance (Art. 6 para. 1 lit. b GDPR).
Further Information	Cartesia Privacy Policy

Cloudflare, Inc.

Aspect	Details
Purpose of Processing	Content Delivery Network (CDN), DDoS protection, website optimization, and Turnstile CAPTCHA protection for login and forms.
Data Recipient	Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.
Legal Basis	Legitimate interest (Art. 6 para. 1 lit. f GDPR) in website security and performance.
Further Information	Cloudflare Privacy Policy

Deepgram

Aspect	Details
Purpose of Processing	Alternative speech-to-text transcription. Processed via the Deepgram EU endpoint for EU data residency.
Data Recipient	Deepgram Inc., 548 Market St, Suite 25104, San Francisco, CA 94104-5401, USA.
Legal Basis	Contract performance (Art. 6 para. 1 lit. b GDPR).
Further Information	Deepgram Privacy Policy

ElevenLabs

Aspect	Details
Purpose of Processing	Alternative text-to-speech synthesis and voice cloning.
Data Recipient	Eleven Labs Inc., 169 Madison Ave #2484, New York, NY 10016, USA.
Legal Basis	Contract performance (Art. 6 para. 1 lit. b GDPR).
Further Information	ElevenLabs Privacy Policy

Firecrawl

Aspect	Details
Purpose of Processing	Optional: Web scraping and data extraction for AI applications, only when users want to integrate public websites into their knowledge database. Conversion of URLs into structured data and LLM-ready markdown.
Data Recipient	Mendable AI Inc. (Firecrawl), San Francisco, CA, USA.
Legal Basis	Contract performance (Art. 6 para. 1 lit. b GDPR).
Further Information	Firecrawl Privacy Policy

Freshworks, Inc.

Aspect	Details
Purpose of Processing	Customer Relationship Management (CRM) and customer support.
Data Recipient	Freshworks Inc., 2950 S. Delaware Street, Suite 201, San Mateo, CA 94403, USA.
Legal Basis	Depending on context: Pre-contractual measures or contract performance (Art. 6 para. 1 lit. b GDPR).
Further Information	Freshworks Privacy Policy

Google Ireland Limited

Aspect	Details
Purpose of Processing	Social Login, push notifications (FCM), and vector embeddings for AI applications. Optional/consent-based: Google Fonts for website typography, Google Analytics for website analytics, and Enhanced Conversions using hashed contact information. Google Ads click-based conversion tracking may process advertising click identifiers, cookieless Consent Mode pings, and conversion event metadata with the user’s Consent Mode v2 status for ad attribution and campaign measurement.
Data Recipient	Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, D04 E5W5, Ireland.
Legal Basis	Contract performance (Art. 6 para. 1 lit. b GDPR) for technical services; consent (Art. 6 para. 1 lit. a GDPR) for Google Fonts, Google Analytics, advertising cookies, and Enhanced Conversions with hashed contact information; pre-contractual measures (Art. 6 para. 1 lit. b GDPR) and legitimate interests (Art. 6 para. 1 lit. f GDPR) for click-based Google Ads conversion measurement.
Further Information	Google Privacy Policy

Groq, Inc.

Aspect	Details
Purpose of Processing	Alternative AI processing (LLM): High-speed processing of text queries through language processing units (LPUs).
Data Recipient	Groq, Inc., 2700 Zanker Road, Suite 150, San Jose, CA 95134, USA.
Legal Basis	Contract performance (Art. 6 para. 1 lit. b GDPR).
Further Information	Groq Privacy Policy

Hetzner Online GmbH

Aspect	Details
Purpose of Processing	Hosting of cloud infrastructure for the itellico voice AI cluster platform, including compute and storage for production, development, and testing environments.
Data Recipient	Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany.
Legal Basis	Legitimate interest (Art. 6 para. 1 lit. f GDPR) in technical infrastructure.
Further Information	Hetzner Privacy Policy

IP Austria Communication GmbH

Aspect	Details
Purpose of Processing	Telephony infrastructure and carrier services for voice calls.
Data Recipient	IP Austria Communication GmbH, Wienerbergstraße 11/B16, 1100 Vienna, Austria.
Legal Basis	Contract performance (Art. 6 para. 1 lit. b GDPR).
Further Information	IP Austria Privacy Policy

itellico AI GmbH

Aspect	Details
Purpose of Processing	Provision of the core itellico voice AI platform, including all related AI processing, telephony, and infrastructure services.
Data Recipient	itellico AI GmbH, Postgasse 19, 1010 Wien, Austria.
Legal Basis	Contract performance (Art. 6 para. 1 lit. b GDPR).
Further Information	The sub-processors listed below are engaged by itellico AI GmbH to deliver the AI platform.

LiveKit

Aspect	Details
Purpose of Processing	Real-time communication (WebRTC & SIP): Provision of infrastructure for real-time audio communication and connection to the telephone network (SIP).
Data Recipient	LiveKit, Inc., 4285 Payne Avenue Suite 9154, San Jose, CA 95157, USA.
Legal Basis	Contract performance (Art. 6 para. 1 lit. b GDPR).
Further Information	LiveKit Privacy Policy

LlamaIndex, Inc.

Aspect	Details
Purpose of Processing	Document processing and data indexing: Parsing and extraction of documents via LlamaParse as well as indexing and vectorization for semantic search.
Data Recipient	LlamaIndex, Inc., USA.
Legal Basis	Contract performance (Art. 6 para. 1 lit. b GDPR).
Further Information	LlamaIndex Privacy Policy

LinkedIn Ireland Unlimited Company

Aspect	Details
Purpose of Processing	Optional/Consent-based: Business network analytics, conversion tracking, and professional advertising only after explicit user consent via cookie banner.
Data Recipient	LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
Legal Basis	Consent (Art. 6 para. 1 lit. a GDPR).
Further Information	LinkedIn Privacy Policy

Meta Platforms Ireland Ltd.

Aspect	Details
Purpose of Processing	Optional/consent-based: Facebook Pixel and Conversions API (CAPI) for social media advertising, retargeting, and conversion tracking — including server-side transmission of hashed contact information (e.g., email, phone) for ad attribution — only after explicit user consent via cookie banner.
Data Recipient	Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Legal Basis	Consent (Art. 6 para. 1 lit. a GDPR).
Further Information	Meta Privacy Policy

Microsoft Ireland Operations Limited

Aspect	Details
Purpose of Processing	Azure AI Services: Speech recognition (speech-to-text), speech synthesis (text-to-speech), AI processing through large language models, and embedding generation for semantic search via Azure OpenAI. Optional/Consent-based: Microsoft Clarity for website analytics and user behavior only after explicit user consent via cookie banner.
Data Recipient	Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland.
Legal Basis	Contract performance (Art. 6 para. 1 lit. b GDPR) for Azure AI Services; Consent (Art. 6 para. 1 lit. a GDPR) for Microsoft Clarity.
Further Information	Microsoft Privacy Policy

Mistral AI

Aspect	Details
Purpose of Processing	Optical character recognition (OCR) and document processing for AI applications.
Data Recipient	Mistral AI, 15 Rue des Halles, 75001 Paris, France.
Legal Basis	Contract performance (Art. 6 para. 1 lit. b GDPR).
Further Information	Mistral AI Privacy Policy

Netlify, Inc.

Aspect	Details
Purpose of Processing	Website hosting and CDN services.
Data Recipient	Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA.
Legal Basis	Legitimate interest (Art. 6 para. 1 lit. f GDPR) in operating a high-performance website.
Further Information	Netlify Privacy Policy

OpenAI Ireland Limited

Aspect	Details
Purpose of Processing	AI processing (LLM) and speech recognition (speech-to-text): Processing of text queries through large language models (e.g., GPT series) as well as conversion of speech input to text (e.g., Whisper).
Data Recipient	OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43 Ireland.
Legal Basis	Contract performance (Art. 6 para. 1 lit. b GDPR).
Further Information	OpenAI Privacy Policy

Pinecone Systems, Inc.

Aspect	Details
Purpose of Processing	Vector database for AI applications and semantic search.
Data Recipient	Pinecone Systems, Inc., 548 Market St Pmb 19327, San Francisco, CA 94104-5401, USA.
Legal Basis	Contract performance (Art. 6 para. 1 lit. b GDPR).
Further Information	Pinecone Privacy Policy

PostHog (Hiberly Ltd.)

Aspect	Details
Purpose of Processing	Website analytics, product analytics, and behavior measurement. Cookieless analytics are used by default; cookie-based/person-level analytics are used only after the relevant consent category is granted.
Data Recipient	Hiberly Ltd., Donald Reid Group Limited, 1010 Eskdale Road, Winnersh Triangle, Wokingham, RG41 5TS, United Kingdom.
Legal Basis	Legitimate interest (Art. 6 para. 1 lit. f GDPR) in product optimization and system improvement; consent (Art. 6 para. 1 lit. a GDPR) where cookie-based analytics or person-level tracking is enabled.
Further Information	PostHog Privacy Policy

Sentry (Functional Software, Inc.)

Aspect	Details
Purpose of Processing	Error monitoring and performance monitoring for applications.
Data Recipient	Functional Software, Inc. d/b/a Sentry, 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA.
Legal Basis	Legitimate interest (Art. 6 para. 1 lit. f GDPR) in system stability and error resolution.
Further Information	Sentry Privacy Policy

Soniox, Inc.

Aspect	Details
Purpose of Processing	Alternative speech-to-text transcription. Processed in the Soniox EU region (Sovereign Cloud) for EU data residency.
Data Recipient	Soniox, Inc., 1045 Helm Ln, San Mateo, CA 94404, USA.
Legal Basis	Contract performance (Art. 6 para. 1 lit. b GDPR).
Further Information	Soniox Privacy Policy

Sinch Ireland Limited

Aspect	Details
Purpose of Processing	Transactional emails via Mailgun.
Data Recipient	Sinch Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland.
Legal Basis	Contract performance (Art. 6 para. 1 lit. b GDPR).
Further Information	Mailgun Privacy Policy

Stripe Technology Europe, Limited

Aspect	Details
Purpose of Processing	Payment processing and billing.
Data Recipient	Stripe Technology Europe, Limited, The One Building, 1 Lower Grand Canal Street, Dublin 2, D02 H210, Ireland.
Legal Basis	Contract performance (Art. 6 para. 1 lit. b GDPR).
Further Information	Stripe Privacy Policy

Tally BV

Aspect	Details
Purpose of Processing	Collection of inquiries and feedback via online forms.
Data Recipient	Tally BV, August Van Lokerenstraat 71, 9050 Ghent, Belgium.
Legal Basis	Depending on context: Pre-contractual measures or contract performance (Art. 6 para. 1 lit. b GDPR).
Further Information	Tally.so Privacy Policy

Tavily Inc.

Aspect	Details
Purpose of Processing	Web search API for AI applications, enabling real-time web access and information retrieval.
Data Recipient	AlphaAI Technologies Inc. (Tavily), 1350 Broadway, 24th Floor, New York, NY 10018, USA.
Legal Basis	Contract performance (Art. 6 para. 1 lit. b GDPR).
Further Information	Tavily Privacy Policy

Twilio Ireland Limited

Aspect	Details
Purpose of Processing	Telephony infrastructure and SIP trunking for voice calls.
Data Recipient	Twilio Ireland Limited, Canal House, Station Road, Portarlington, Co. Laois, R32 AP23, Ireland.
Legal Basis	Contract performance (Art. 6 para. 1 lit. b GDPR).
Further Information	Twilio Privacy Policy

Ubicloud B.V.

Aspect	Details
Purpose of Processing	Managed databases for applications.
Data Recipient	Ubicloud B.V., Turfschip 267, 1186 XK Amstelveen, The Netherlands.
Legal Basis	Contract performance (Art. 6 para. 1 lit. b GDPR).
Further Information	Ubicloud Privacy Policy

Upstash, Inc.

Aspect	Details
Purpose of Processing	Caching and session management for applications.
Data Recipient	Upstash, Inc., USA.
Legal Basis	Contract performance (Art. 6 para. 1 lit. b GDPR).
Further Information	Upstash Privacy Policy

TikTok Technology Limited

Aspect	Details
Purpose of Processing	Optional/consent-based: Social media analytics, conversion tracking, and targeted advertising only after explicit user consent via cookie banner.
Data Recipient	TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.
Legal Basis	Consent (Art. 6 para. 1 lit. a GDPR).
Further Information	TikTok Privacy Policy

Vonage Holdings Corp.

Aspect	Details
Purpose of Processing	Alternative telephony infrastructure and communication APIs.
Data Recipient	Vonage Holdings Corp., 101 Crawfords Corner Road, Suite 2416, Holmdel, NJ 07733, USA.
Legal Basis	Contract performance (Art. 6 para. 1 lit. b GDPR).
Further Information	Vonage Privacy Policy

WNT Telecommunication GmbH

Aspect	Details
Purpose of Processing	Carrier services for telephony and voice communication.
Data Recipient	WNT Telecommunication GmbH, Richard-Strauss-Straße 43, 1230 Vienna, Austria.
Legal Basis	Contract performance (Art. 6 para. 1 lit. b GDPR).
Further Information	WNT Privacy Policy

Contact: privacy@itellico.ai

​Data Processors

​Anthropic Ireland Limited

​Apple Distribution International Ltd.

​Cal.com, Inc.

​Calendly LLC

​Cartesia

​Cloudflare, Inc.

​Deepgram

​ElevenLabs

​Firecrawl

​Freshworks, Inc.

​Google Ireland Limited

​Groq, Inc.

​Hetzner Online GmbH

​IP Austria Communication GmbH

​itellico AI GmbH

​LiveKit

​LlamaIndex, Inc.

​LinkedIn Ireland Unlimited Company

​Meta Platforms Ireland Ltd.

​Microsoft Ireland Operations Limited

​Mistral AI

​Netlify, Inc.

​OpenAI Ireland Limited

​Pinecone Systems, Inc.

​PostHog (Hiberly Ltd.)

​Sentry (Functional Software, Inc.)

​Soniox, Inc.

​Sinch Ireland Limited

​Stripe Technology Europe, Limited

​Tally BV

​Tavily Inc.

​Twilio Ireland Limited

​Ubicloud B.V.

​Upstash, Inc.

​TikTok Technology Limited

​Vonage Holdings Corp.

​WNT Telecommunication GmbH