1. Overview
To provide franchie, DCBA Danismanlik Limited Sirketi ("franchie") uses the third-party service providers below. Those that process personal data on behalf of our customers are subprocessors under our Data Processing Addendum. Each one is bound by a written contract with data protection terms, and AI providers are contractually barred from training their models on customer data.
2. Current subprocessors
| Provider | Purpose | Location | Data processed |
|---|---|---|---|
| Google Cloud (Google LLC) | Servers, database and backups | United States | All platform data (encrypted) |
| Anthropic PBC | AI model (writing replies, scoring, summaries) | United States | Pseudonymised conversation content; names, phone numbers and emails are not sent to the model |
| TypeSafe | Short AI classifications (e.g. detecting a do-not-contact request) | United States | Pseudonymised message content |
| Meta Platforms | WhatsApp, Instagram and Messenger messaging, lead ads | United States / Ireland | Message content, phone number, profile name |
| Twilio Inc. | Phone calls and SMS verification codes outside Turkiye | United States | Phone number, call audio, SMS content |
| ElevenLabs | AI voice, voice cloning, speech-to-text | United States | Agent speech text, voice sample and voice ID for cloning, call audio |
| Deepgram | Speech-to-text (backup provider) | United States | Call audio |
| Mailgun (Sinch) | Email delivery | United States / EU | Name, email address, email content |
| Sentry (Functional Software) | Error monitoring | United States | Technical error logs (personal data is stripped) |
| Polar Software Inc. | Merchant of record: checkout, subscriptions, invoices, sales tax | United States | Billing name, email, address, payment details (handled by Polar and its payment processor) |
| Google and Microsoft (calendar) | Calendar sync (if the customer connects it) | United States | Event title, time, attendee emails |
| Netlify | Website hosting | United States | IP address, page requests |
| Cloudflare | Form spam protection (Turnstile) | United States | IP address, browser signals |
Some providers are used only when a customer turns on the related feature (for example calendar sync or voice cloning). Polar acts as merchant of record and processes billing data for purchases made through it.
3. Transfer safeguards
Most providers are based in the United States. For personal data from the EEA, UK and Switzerland we rely on the EU Standard Contractual Clauses and the UK International Data Transfer Addendum, or on the provider's certification under the EU-US Data Privacy Framework and its UK and Swiss extensions where available. Before content reaches an AI model, names, phone numbers and email addresses are replaced with pseudonyms.
4. Changes and notifications
We give at least 30 days' notice before a new subprocessor starts processing customer personal data, by updating this page. To be notified by email, write to hi@franchie.ai with the subject "Subprocessor updates". Customers may object as described in the DPA.
Version history
- October 18, 2026 · First list for the global site.
Questions? DCBA Danismanlik Limited Sirketi · hi@franchie.ai · Esentepe Mah. Buyukdere Cad. Ferko Signature No: 175 Ic Kapi No: 7, Sisli, Istanbul, Turkiye
Other documents: Privacy · Terms · Cookies · DPA · AI Calling Policy · Acceptable Use · Cookie settings