Subprocessors

Vercel Inc.

Function: Application hosting, edge functions, deployment infrastructure.

Data processed: All data flowing through the BrokerNest application.

Location: United States (primary), with edge presence globally.

Supabase Inc.

Function: Managed PostgreSQL database, authentication, file storage.

Data processed: All persistent application data, including lead records, conversation logs, account credentials.

Location: United States.

Twilio Inc.

Function: SMS and voice carrier services, phone-number provisioning.

Data processed: Recipient and sender phone numbers, message content, call audio.

Location: United States.

ElevenLabs Inc.

Function: Conversational voice AI for inbound and outbound calls.

Data processed: Call audio, conversation transcripts, knowledge base documents.

Location: United States.

Resend Inc.

Function: Transactional email delivery (curated property packages, notifications).

Data processed: Recipient email address, email content, delivery metadata.

Location: United States.

Anthropic PBC

Function: Claude large-language-model API for SMS conversation generation, classification, and signal extraction.

Data processed: SMS conversation history, lead profile fields, knowledge base context required to compose an AI reply. Anthropic does not train on data sent via the API.

Location: United States.

Large-language-model providers engaged via ElevenLabs (Anthropic PBC, Google LLC, OpenAI, L.L.C.)

Function: Conversational reasoning for the voice agent. ElevenLabs routes each conversation to a configured large-language model to generate the agent's responses.

Data processed: Voice-conversation transcripts and the scheduling or property context our systems supply to the agent during a call. ElevenLabs' agreements with each provider expressly prohibit training their models on customer content, and our ElevenLabs workspace's data-sharing setting for model improvement is disabled. No customer data — including any Google user data — is used to train these models.

Location: United States.

Stripe, Inc.

Function: Subscription billing, payment processing, invoicing.

Data processed: Customer billing email, payment-method tokens (card details are stored at Stripe, not by us), invoice history.

Location: United States, Ireland (EU customers).

Spark Real Estate Software Inc. (Spark.re)

Function: Customer-relationship management for real estate developers (developer-tier customers only).

Data processed: Lead contact data, inventory data, conversation summaries — bidirectional sync controlled by the customer's Spark API key.

Follow Up Boss (Enchant Holdings, LLC)

Function: Customer-relationship management for real estate brokerages.

Data processed: Lead contact data, call/SMS logs — synced only when the customer connects their FUB account.

HighLevel Inc. (GoHighLevel)

Function: Alternative CRM for brokerages using GoHighLevel.

Data processed: Lead contact data, activity logs — synced only when the customer connects their GHL account.

Google LLC

Function: Google Calendar scheduling — availability checks and appointment booking, rescheduling, and cancellation.

Data processed: Calendar events and availability — only within the Calendar scopes the customer explicitly grants via OAuth. No Gmail, Drive, or Photos data is requested or accessed. Google user data is never used to train AI/ML models. Use complies with the Google API Services User Data Policy, including its Limited Use requirements.

Microsoft Corporation

Function: Outlook Calendar scheduling for customers using Microsoft 365.

Data processed: Calendar events — only within scopes the customer explicitly grants via OAuth.