LumiDesk — Sub-processors
This page lists the third-party service providers ("sub-processors") that DeepO3 uses to provide the LumiDesk AI phone-receptionist service and that may process personal data on behalf of our business customers.
Last updated: 8 November 2026
Current sub-processors
| Sub-processor | What they do for LumiDesk | Personal data involved | Location / country | Legal terms |
|---|---|---|---|---|
| Retell AI, Inc. | Core voice AI — answers calls, speech-to-text, text-to-speech, call recording & transcription | Caller audio, transcripts, caller phone number, call metadata | United States (processes globally) | retellai.com |
| Twilio Inc. | Telephony (phone numbers, call connectivity) and confirmation SMS | Caller phone number, SMS content | United States / global | twilio.com/legal |
| Supabase | Database and authentication hosting (accounts, bookings, settings) | Account data, bookings, caller details stored with a booking | EU or United States (transfers covered by the safeguards described below) | supabase.com/legal/dpa |
| Google (Google Calendar / Google Cloud) | Creating calendar events for bookings on the business's own calendar | Booking details (time, service, name/notes) | United States / global | cloud.google.com/terms |
| Stripe, Inc. | Payment processing for subscriptions (business customers only) | Business customer billing data (card data handled by Stripe, not stored by LumiDesk) | United States / global | stripe.com/legal/dpa |
Notes - Stripe processes business-customer billing data, where LumiDesk is the controller — it is listed here for transparency. - International transfers to providers outside the EU/EEA rely on the EU–US Data Privacy Framework (where the provider is certified) and/or Standard Contractual Clauses with supplementary measures. See the DPA, Section 7.
Changes to this list
We may update our sub-processors as the service evolves. Before adding or replacing a sub-processor that processes customer personal data, we will give affected customers prior notice (at least 30 days) via email and this page. Customers may object on reasonable data-protection grounds as described in our Data Processing Agreement.
To be notified of changes, email support@lumidesk.fi.
Draft template, not legal advice. Have a qualified lawyer review before publishing.