Now onboarding agencies in the USA, Australia, New Zealand, Singapore and the UAE.

TalkToLeads

TalkToLeads legal

Subprocessors and Third-Party Service Providers

TalkToLeads uses third-party providers to host systems, send communications, process payments and support service delivery. Every provider on this page is one this service actually calls.

Last updated
24 October 2026
Version
DRAFT-v0.1
Review status
Draft — pending legal review
Published by
Pritpal Kaur
Legal contact
pritpalkaur112@gmail.com

Draft policy — legal review required before accepting payment or processing client lead data.

This document is a working draft prepared for review. It is not legal advice and should not be relied on. Passages in [INSERT …] mark decisions still to be made.

Processing regions still to be confirmed

Each row is taken from what this service actually calls, and the status reflects whether that provider is processing data today. The region column is the exception: no processing region is pinned in our configuration, so each one must be confirmed in the provider's own console before this page is final. This list is incorporated into Annex 3 of the Data Processing Addendum, so an inaccurate row is a contractual misstatement.

What each status means

Active
Currently in production and processing data.
Planned
Intended for future use; not processing data today.
Optional
Used only for specific engagements or features.
Client-selected
Used only where a client chooses that integration.

Vercel

Active
Service
Website and application hosting
Purpose
Serve the website and application; edge and server request handling
Data categories
Request metadata, IP address, technical logs
Location
United States
Last updated
[INSERT DATE OF LAST VERIFICATION]
Provider privacy policy for Vercel (opens in a new tab)

Supabase

Active
Service
Database and authentication
Purpose
Store application and workflow data; authenticate client-portal users
Data categories
Client contact data, workflow configuration, lead and conversation data, audit logs
Location
AWS ap-northeast-1 — Tokyo, Japan
Last updated
[INSERT DATE OF LAST VERIFICATION]
Provider privacy policy for Supabase (opens in a new tab)

Google LLC

Active
Service
Google sign-in
Purpose
Authenticate a client-portal login with a Google account
Data categories
Email address, display name, profile picture URL
Location
United States
Last updated
[INSERT DATE OF LAST VERIFICATION]
Provider privacy policy for Google LLC (opens in a new tab)

Wise

Active
Service
Payment
Purpose
Request, receive and confirm payment
Data categories
Billing contact details, payment records
Location
[INSERT REGION — CONFIRM IN THE WISE CONSOLE]
Last updated
[INSERT DATE OF LAST VERIFICATION]
Provider privacy policy for Wise (opens in a new tab)

Anthropic

Active
Service
Website chat assistant (Claude API)
Purpose
Generate replies in the website chat widget
Data categories
Chat message content and the question asked
Location
United States
Last updated
[INSERT DATE OF LAST VERIFICATION]
Provider privacy policy for Anthropic (opens in a new tab)

Google Analytics

Planned
Service
Website analytics
Purpose
Aggregate measurement of how the site is used
Data categories
Page views, referrer, approximate location, device and browser type
Location
[INSERT REGION — GOOGLE ANALYTICS, CONFIRM IN PROVIDER CONSOLE]
Last updated
[INSERT DATE OF LAST VERIFICATION]
Provider privacy policy for Google Analytics (opens in a new tab)

Cloudflare

Active
Service
Turnstile bot protection
Purpose
Verify that a form submission comes from a person, not a bot
Data categories
IP address, browser signals, challenge token
Location
Global edge network
Last updated
[INSERT DATE OF LAST VERIFICATION]
Provider privacy policy for Cloudflare (opens in a new tab)

Resend

Planned
Service
Transactional email delivery
Purpose
Send checkout and onboarding notifications, receipts and service email
Data categories
Name, email address, message content
Location
[INSERT REGION — RESEND, CONFIRM IN PROVIDER CONSOLE]
Last updated
[INSERT DATE OF LAST VERIFICATION]
Provider privacy policy for Resend (opens in a new tab)

Meta (WhatsApp)

Active
Service
Messaging
Purpose
Carry WhatsApp conversations started from a button on the site
Data categories
Phone number and message content of conversations a person chooses to start
Location
[INSERT REGION — CONFIRM IN THE META BUSINESS CONSOLE]
Last updated
[INSERT DATE OF LAST VERIFICATION]
Provider privacy policy for Meta (WhatsApp) (opens in a new tab)

CRM and calendar providers

Client-selected
Service
Client-chosen integrations
Purpose
Route qualified leads into the tools a client already runs
Data categories
Lead contact details and qualification answers
Location
The region of the client’s own CRM or calendar account
Last updated
[INSERT DATE OF LAST VERIFICATION]
Provider privacy policy for CRM and calendar providers (opens in a new tab)

Changes to this list

We may update this list as our service providers change. Where required by law or contract, we will provide applicable notice of material changes.

Questions or objections

Clients can raise a question or object to a subprocessor under the process in the Data Processing Addendum. Write to pritpalkaur112@gmail.com, use the privacy request page, or contact the founder directly at pritpalkaur112@gmail.com.