Subprocessors
The providers that help IMFA Agents run, what they do, and where they process data.
Last updated:
1. About this list
IMFA Labs LLC ("IMFA") uses the providers below to run IMFA Agents. When we process data for our customers (as described in our Data Processing Agreement), these providers are our subprocessors. Locations are given as far as the providers document them; "varies" means the provider chooses the data center for each request. Each provider's own subprocessors are listed in its documentation, not here.
We update this page before we add or replace a subprocessor. Customers can object as the Data Processing Agreement describes. Last verified: November 11, 2026.
2. Infrastructure
| Provider | Service | Purpose | Personal data | Location | Documentation |
|---|---|---|---|---|---|
| Convex, Inc. | Backend, database, functions | Stores and runs the whole service: accounts, agents, conversations, leads, settings | All service data | The region of our Convex deployment, per Convex's documentation | Privacy |
| Convex, Inc. | Convex AI Gateway | Routes agent replies, the builder assistant, decisions, builder dictation, and knowledge indexing and search to AI models, with zero data retention requested except for dictation and the embeddings of current knowledge indexes | Prompts, conversation passages, instructions, dictation audio, text to index or search | Varies; models as listed below | AI Gateway |
| Vercel Inc. | Hosting and bot check | Serves the website, dashboard, and chat widget; checks requests for bots; relays live call audio for website and phone calls | IP address, request data, call audio in transit (not stored) | Global edge network; not EU only | Privacy |
| Vercel Inc. | Vercel AI Gateway | Routes live voice | Call audio | Varies; models as listed below | AI Gateway |
| BunnyWay d.o.o. (bunny.net) | Storage and CDN | Stores uploaded files and images; delivers them through a content delivery network | Files, images | Storage in the EU region we selected; CDN delivery worldwide | Privacy |
3. AI models
All on the Convex AI Gateway with zero data retention requested, unless marked.
| Provider | Models | Used when | Location |
|---|---|---|---|
| Anthropic | Claude Haiku | Default agent model; builder on Pro and with files; topics and query translation | Varies |
| DeepSeek | DeepSeek V4 Flash | Fallback of the default agent model; builder on standard accounts | Varies; provider based in China |
| Alibaba Cloud | Qwen | Fallback of the default agent model and of the builder | Varies; provider based in China |
| Google LLC | Gemini Flash, Gemini embeddings (older knowledge indexes) | Fallback of the default agent model and of the builder; an owner's choice; knowledge indexing | Varies |
| OpenAI, Moonshot AI (Kimi), Mistral AI, Z.ai (GLM), xAI (Grok) | Their supported models | Only when an owner picks them for an agent | Varies; Moonshot AI and Z.ai are based in China |
| TypeSafe AI | Jev | Decisions, safety checks, and ranking knowledge search results | Varies |
| ElevenLabs (Convex AI Gateway, zero data retention cannot be requested for audio) | Scribe | Builder dictation | Varies |
| Google LLC (Convex AI Gateway, no zero data retention) | Gemini embeddings (current knowledge indexes) | Knowledge indexing and search | Varies |
| Google LLC (Vercel AI Gateway, no zero data retention) | Gemini Live | Voice calls | Varies |
4. Other services
| Provider | Service | Purpose | Personal data | Location |
|---|---|---|---|---|
| Stripe | Payments | Checkout, subscriptions, invoices, refunds. Stripe is also an independent controller for its own payment and fraud processing | Billing contact, payment and transaction data | United States and other countries |
| Resend | Sign-in codes, receipts, service notices | Email address, message content | Varies, per Resend's documentation | |
| Context.dev | Web page retrieval | Reads the public web pages an owner adds as knowledge | Page addresses and content | Varies |
| Zernio | Messaging connections | Connects WhatsApp, Instagram, and Facebook accounts in one click and carries their messages | Sender ids, names, messages | See the Zernio Trust Center |
5. Platforms you connect
These platforms are not our subprocessors: you connect them, and they process data as independent controllers under their own terms.
- Meta (WhatsApp Cloud API, Instagram, Facebook)
- Telegram and Discord
- Google (Sign in with Google, Google Calendar, Google Meet, Google Sheets)
- Google Analytics, through Google Tag Manager, only after consent on our own website
6. Contact
Questions about this list or to be told of changes: privacy@imfa.io.
