Sub-processors

Who processes data on Alfaaz's behalf.

Alfaaz (Pulkit Mendiratta, eenmanszaak, Amsterdam, NL) uses the third-party providers below to operate the service. Each receives only the data it needs for its function. We do not sell or rent personal data, and we do not permit these providers to use your Content to train AI models. Not every provider processes every message — some are used only for specific features.

01

AI providers

ProviderWhat it doesData it receivesLocationRetention / training
Anthropic (Claude)Generates conversation questions; extracts people/places/events and story summaries; writes life chapters and the elder profileTranscripts, elder & family names, topic, previously extracted entitiesUSAAPI inputs retained briefly for safety/abuse monitoring then deleted (per Anthropic’s API policy); not used to train models.
ElevenLabsSpeech-to-text (transcribing the elder’s voice) and text-to-speech (generating Alfaaz’s voice)Elder voice-note audio; response textUSAProcessed to produce text/speech. Retention follows ElevenLabs’ policy and our tier; we are working to enable zero-retention. Until then, treat audio as retained on ElevenLabs’ default tier.
Google (Gemini API)Scores conversations internally (e.g., emotional depth and shareability) to surface the right stories to the familyTranscript text + story summary for the scored conversationUSA / globalProcessed for scoring; not used to train models (per the API terms we rely on).
OpenAIPart of our model-routing layer; may process text for specific tasks/fallbacksTranscript-derived text for the specific taskUSAAPI data not used to train models (per OpenAI API policy). Used only where routed.
Sarvam AIPart of our model-routing layer for Indic-language text tasksTranscript-derived text for the specific taskIndiaProcessed for the task.

02

Messaging, infrastructure, and operations

ProviderWhat it doesData it receivesLocationNotes
WasenderAPIDelivers and receives messages over WhatsApp (third-party messaging provider)Elder phone number; voice-note audio; message metadataProvider infrastructure (varies)Transient — messages pass through for delivery. WhatsApp itself is operated by Meta under its own policy.
VercelHosts the web application; stores audio files (Vercel Blob)Application traffic; voice-note and generated audio filesUSA + global edgeAudio retained while the elder is active; deleted on elder deletion.
MongoDB AtlasPrimary databaseAll account, conversation, extracted-entity, and profile dataCloud region (Mumbai option under evaluation)Encrypted at rest and in transit.
ClerkAuthentication and session managementEmail, name, login sessionsUSAManages credentials; we do not store passwords.
ResendTransactional email (session digests, invitations, reminders)Recipient email, elder name, session-summary highlights, linksUSAUsed only for service emails, not marketing.
StripePayment processingCard details, billing info (entered with Stripe)USA / globalWe never store card numbers. One-time, manual charges only.
PostHogProduct analyticsUsage events; identifiers hashed before leaving our servers where possibleEU (eu.i.posthog.com)No advertising trackers; not used for behavioural advertising.

03

Notes

  • This list reflects providers that may process personal data. We keep Data Processing Agreements with providers acting as our processors and rely on SCCs / EU-US Data Privacy Framework participation for transfers out of the EEA where applicable.
  • Questions or objections about a sub-processor: privacy@alfaaz.me.

Trust & care

Continue reading