FreeLeadLog sub-processors
Last updated: [DATE]
Spectre Graphics ("we") uses the third-party service providers below ("sub-processors") to run FreeLeadLog. Each one processes personal data only to provide its specific function and only on our instructions. This list is part of our Data Processing Agreement. We will announce changes at least 30 days in advance (see "Changes" below).
Infrastructure (always used)
| Sub-processor | Purpose | Data processed | Location of processing | Transfer safeguard |
|---|---|---|---|---|
| Hostinger International Ltd. [VERIFY entity] | Application hosting (virtual server), database | All customer data: accounts, teams, leads, messages, routes | Frankfurt, Germany (EU) | EU, no transfer |
| [S3 STORAGE PROVIDER, e.g. self-hosted MinIO on the Hostinger server / Cloudflare R2] [VERIFY] | Storage of voice notes and photos | Audio files, images | [Frankfurt, Germany / EU jurisdiction] [VERIFY] | [EU, no transfer / SCCs + DPF] |
| Cloudflare, Inc. [VERIFY] | Encrypted nightly database backups (R2 object storage) | Full database backup (all customer data) | [EU jurisdiction bucket / USA] [VERIFY] | [EU, no transfer / EU-US DPF + SCCs] |
AI processing (always used)
| Sub-processor | Purpose | Data processed | Location | Transfer safeguard |
|---|---|---|---|---|
| OpenRouter, Inc. | Routes text to the language model that turns a rep's message into a structured lead | Message text or voice transcript (may contain prospect name, address, phone, notes); no images, no account credentials | USA | SCCs [+ EU-US DPF if certified, VERIFY]; zero data retention enabled [VERIFY] |
| Anthropic, PBC (via OpenRouter) | Language model (default model: Claude Haiku 4.5) | As above | USA [VERIFY] | SCCs / EU-US DPF [VERIFY]; not used to train models under API terms |
| [OpenAI, L.L.C. — or the configured Whisper-compatible provider] [VERIFY] | Speech-to-text transcription of voice notes | Audio of voice notes, language hint | USA [VERIFY] | EU-US DPF + SCCs [VERIFY]; API data not used for training |
Messaging channels (only if your team uses them)
| Sub-processor | Purpose | Data processed | Location | Transfer safeguard |
|---|---|---|---|---|
| Meta Platforms Ireland Ltd. (WhatsApp Business / Cloud API) | Receives messages, voice notes, photos and locations reps send to the FreeLeadLog WhatsApp number; sends replies and reminders | Rep phone number and WhatsApp profile name, message content, media, location | EU / USA (Meta infrastructure) | WhatsApp Business Terms and Data Processing Terms; EU-US DPF + SCCs |
| Telegram (Telegram Messenger Inc. / Telegram FZ-LLC) | Same, for the FreeLeadLog Telegram bot | Rep Telegram user ID and name, message content, media, location | Outside the EU (Telegram does not publish locations; Dubai/Netherlands/Singapore reported) | No data processing agreement available. Telegram is an independent service that your reps use under Telegram's own terms. If you need a fully GDPR-contracted channel, use WhatsApp or the in-app chat and disable Telegram for your team. |
Apps and maps
| Sub-processor | Purpose | Data processed | Location | Transfer safeguard |
|---|---|---|---|---|
| Google LLC / Google Ireland Ltd. (Google Maps Platform) | Displays the lead map in the web dashboard and mobile app | Map tiles requested for the area shown, device IP address, coordinates of the map view; lead pins are drawn on your device | USA / global | Google Maps Platform data processing terms; EU-US DPF + SCCs |
| 650 Industries, Inc. (Expo) | Delivers push notifications (reminders, route updates) to the mobile app | Push token, notification text (may contain a lead name) | USA | EU-US DPF + SCCs [VERIFY]; Expo forwards to Apple Push Notification service / Firebase Cloud Messaging |
| Apple Inc. / Google LLC (APNs / FCM) | Final delivery of push notifications to iOS / Android devices | Push token, notification content | USA / global | Platform terms; EU-US DPF |
Changes
We will publish any new or replaced sub-processor on this page and email the account owner of each customer at least 30 days before it starts processing customer data. You may object on reasonable data protection grounds within that period, as described in section 8 of the DPA. To be notified, make sure your account owner's email is current, or write to privacy@[DOMAIN].
Contact
Spectre Graphics, [ADDRESS], Tunisia: privacy@[DOMAIN] EU representative (Art. 27 GDPR): [EU REPRESENTATIVE NAME, ADDRESS, EMAIL]