Legal
Subprocessors
Last updated: June 6, 2026
The CalvyxDial platform is operated by DevSource.DEV on its own controlled infrastructure. The core of the Service — the PostgreSQL database that holds all Customer Data, the Asterisk telephony engine, call-recording storage, and the in-memory live state — runs on operator-controlled servers, not on a third-party cloud. Customer Data is therefore not held by a general-purpose SaaS database vendor.
To deliver the Service we do engage a small set of third-party providers (“Subprocessors”) for specific functions, listed below. Each Subprocessor is bound by a written agreement requiring it to maintain data-protection obligations no less protective than those we provide to our customers.
We will provide reasonable advance notice of any addition or replacement to this list. Customers who have signed our Data Processing Agreement may object to a new Subprocessor on reasonable data-protection grounds within thirty (30) days of notice; if such an objection cannot be resolved, the customer may terminate the affected service for convenience.
| Subprocessor | Purpose | Location | Data Processed |
|---|---|---|---|
| Telnyx | Voice telephony carrier (outbound/inbound), SMS messaging, phone number (DID) provisioning | United States | Call audio in transit, SMS message content and delivery receipts, phone numbers, call detail metadata. Carrier-side call recording is disabled — recordings are not stored at Telnyx. |
| Cloudflare | Edge TLS termination and ingress proxy (Cloudflare Tunnel) for the application; encrypted off-site backups (R2) | Global / United States | Customer Data in transit only via the tunnel (not stored at the edge); encrypted, at-rest off-site backups of the database and recordings in R2. |
| Brevo | Transactional email delivery for scheduled reports | European Union | Only when a customer configures a scheduled report: the recipient addresses that customer entered, plus the report itself — the account and schedule name in the subject line, and aggregate call statistics (calls, answers, drops, sales, talk time) broken down by campaign and, for agent reports, by agent name or login. No leads, contact records, dialed numbers, or recordings. |
| BetterStack | Uptime and health monitoring | European Union | No Customer Data; health checks and heartbeats only. |
| Cal.com | Demo scheduling on the marketing website only | United States | Invitee name, email, and selected meeting time — only when a visitor books a demo. |
| Vercel | Marketing website hosting and CDN | Global edge network | Static marketing pages and assets only; no Customer Data. |
For questions about how we share data with Subprocessors, contact support@calvyxdial.com.