Subprocessors
The third-party providers that may process personal data on Telmoni's behalf to run the hosted service, with each one's purpose and primary location.
Last updated 2026-10-21.
To provide the hosted platform, Telmoni LLC engages the providers below ("subprocessors"), each of which may process personal data on our behalf. Each receives only what its function requires and is bound to use it only to provide its service to us. This list is part of the Privacy Policy, and your use of the service authorizes these subprocessors.
| Provider | Entity | Purpose | Data | Primary location |
|---|---|---|---|---|
| Google Cloud | Google LLC | Cloud infrastructure: the application runtime, database and cache, key management, secret storage and container registry | Everything the service stores | United States |
| Stripe | Stripe, Inc. | Billing and payment processing. We never store a full payment-card number; Stripe handles card data under its own terms | Billing details, invoice history | United States |
| WorkOS | WorkOS, Inc. | Sign-in, identity and single sign-on | Authentication identifiers such as name and email address | United States |
| Resend | Resend, Inc. | Transactional email: invitations, word of a project you were added to, ownership-transfer offers and deletion confirmation codes | The recipient's address and the message contents | United States |
| Google (Gemini API) | Google LLC | Console agent model inference: answering the questions people ask the console agent | Each question, the earlier turns of its conversation, and what the agent's tools read to answer it: retrieved passages, the member roster, connectors, delivery logs and audit events | Global: the Gemini API pins no region |
| Google (Gemini API) | Google LLC | Vector embeddings for the console agent's search index | Search queries, and the indexed passages from documentation, audit logs, feed notices and delivery logs | Global: the Gemini API pins no region |
Both Gemini rows use Google's paid service: every request goes through a Google Cloud project with an active billing account. Under Google's terms for that service, Google does not use the prompts or the responses to improve its products, processes them under its Data Processing Addendum for Products Where Google is a Data Processor, and keeps them for 55 days solely to detect abuse and for disclosures the law requires. The Gemini API serves requests from a global pool, so one may be processed in any region where Google runs the model.
Where product analytics is configured, usage events for the activation funnel may be sent to a product-analytics provider, keyed to a pseudonymous identifier rather than to your content. When it is not configured, these events stay in our own logs and no third party receives them. This subprocessor is optional and enabled per deployment; it will be named here when it is.
Changes
We will give at least 30 days' notice before adding or replacing a subprocessor by updating this page and, if you have subscribed to updates, by email. During that period you may object on reasonable data-protection grounds; if we cannot reasonably accommodate the objection, your remedy is to stop using the affected part of the service and, if that is not workable, to terminate. Where a change is urgently required to keep the service running, we may make it and notify you as soon as practicable, and your objection right still applies.
Related documents
Terms of Service
The terms governing the hosted platform: eligibility, what you own, what you are paying for, what we promise, acceptable use, liability, and dispute resolution.
Security
How the hosted service isolates tenants, holds secrets, controls access, encrypts traffic, audits changes and deletes data, and how to report a vulnerability.