Legal
Subprocessor Notice
Last updated 2026-07-23
1. Scope
This notice identifies providers that EFFICIO MARKETING LLC may use as subprocessors when providing the Platform and processing Customer Personal Data under the Data Processing Addendum. A provider applies only when the relevant feature and production configuration cause it to process Customer Personal Data. Providers that process only Efficio-controlled account, payment, legal, or business-operations data may instead be described in the Privacy Policy and are not necessarily subprocessors for Customer Personal Data.
2. Current subprocessor categories
| Provider | Purpose | Data involved | When used |
|---|---|---|---|
| Vercel Inc. | Application hosting, edge delivery, serverless execution, request routing, and infrastructure headers. | Published Site content; requests and response data in transit; network, device, route, and IP-derived location context; Customer Personal Data handled by hosted Platform functions. | Core Platform hosting. |
| Supabase Inc. and its infrastructure providers | Authentication, database, object storage, access controls, and related backend services. | Account and organization data; site content and configuration; leads, appointments, chat and call metadata; stored media; Customer Personal Data and operational records. | Core production data services. |
| Telnyx LLC | Phone-number provisioning, call forwarding and routing, provider callbacks, and call metadata. | Business and forwarding numbers; caller and dialed numbers; provider call identifiers; caller name where supplied; status, duration, timestamps, and routing outcomes. Call audio is not intended to be recorded. | Only when Call Confirmation is enabled for a site. |
| OpenAI, L.L.C. | Configured website drafting, content revision, action-report, validation, and optimization functions. | Business onboarding data, source-site extracts, draft and revision context, validation data, and limited conversion context. Current action reports exclude raw Visitor lead messages and direct contact fields. | Only when the applicable AI feature is configured and used. |
| Efficio's configured SMTP or transactional email provider | Organization invitations, authentication-link and verification delivery, lead notifications, and operational email. | Recipient and sender addresses, display names, message content, delivery status, timestamps, and provider metadata. Lead-notification messages are designed not to include Visitor contact details. | Only when application email delivery is configured and used. The current provider entity is available on request. |
| Sentry or another configured observability provider | Error reporting, performance monitoring, troubleshooting, release analysis, and security operations. | Error, route, release, device, request, and diagnostic context configured for monitoring. Efficio designs its monitoring use to avoid direct lead contact content. | Only when the provider is configured for the relevant environment. |
3. Processing locations and safeguards
Providers may process data in the United States, the configured service or project region, and other locations permitted by their applicable service and data-protection terms. Exact infrastructure can change as providers operate and secure their services. Where a restricted international transfer applies, the transfer provisions in the Data Processing Addendum govern and the parties must complete any additional legally required mechanism for the affected processing.
4. Changes and objections
Efficio may update this notice as the Platform, providers, and feature configurations change. Where applicable law or a written customer agreement requires advance notice of a material new subprocessor, Efficio will provide reasonable notice through this page, the Platform, the customer’s account email, or another agreed channel. A customer may object on reasonable, documented data-protection grounds by contacting privacy@effic.io. The parties will consider a commercially reasonable alternative; if none is available, the affected feature may be suspended or terminated.
5. Questions
Customers may contact privacy@effic.io for current provider information relevant to their configured features, including available data-processing and transfer information. This notice does not represent that every listed provider receives every data category or is active for every customer.