The third parties we share data with to run Kolekt — what they do, what data they touch, and where.
Last updated: 2026-06-19
Working draft
Kolekt is in private beta. This document is a working draft and will be reviewed by Growthify Ltd's legal counsel before any customer data is collected. Operators considering Kolekt for regulated workloads should request the executed version when it issues.
Kolekt engages the sub-processors below to provide the service. Each is bound by a data-processing agreement and processes data only on our instructions. This register backs our DPA and is kept current as integrations change.
| Provider | Purpose | Data categories | Region |
|---|---|---|---|
| Railway | Backend hosting + PostgreSQL database | All tenant data at rest | US |
| Vercel | Frontend hosting + CDN | Request metadata, IP | Global (US edge) |
| Twilio | SMS notifications + telephony | Phone numbers, message content | US |
| ElevenLabs | Conversational voice AI (receptionist) | Call audio, transcripts | US |
| Anthropic | AI classification, agents, assistant (Claude) | Call transcripts, lead text | US |
| Resend | Transactional email delivery | Email addresses, message content | US |
| Stripe | Billing + payment processing | Name, email, billing metadata | US |
| Calendar integration (OAuth, two-way sync) | Booking + event details | Global | |
| Microsoft | Outlook/Graph calendar integration | Booking + event details | Global |
| Cloudflare | Bot mitigation (Turnstile) + CDN | IP, request metadata | Global |
| Object storage (Cloudflare R2 / AWS S3) | Recordings, documents, exports, attachments | Recordings, KB docs, export packages | US (residency-configurable) |
We update this page when a sub-processor is added or removed. Customers under a DPA may request advance notice of material changes via their compliance contact.