Legal
Sub-processors
The service providers Concya uses to host, secure, route, transcribe, synthesize, analyze, and support the restaurant operating platform.
Last updated: May 21, 2026
We use sub-processors only to provide, secure, support, and improve Concya services.
Feature-specific providers apply only when the related product, channel, or integration is enabled.
Customer data is not sold, and providers are expected to process data only under Concya instructions.
Vercel
Website hosting, edge delivery, serverless runtime, deployment logs
Account, usage, request, and technical data
United States
Supabase
Database, authentication, storage, and backend APIs
Account, restaurant, reservation, message, and configuration data
United States / customer-selected region
Amazon Web Services
Cloud infrastructure, compute, storage, and operational logging
Application, voice, file, request, and technical data
United States
Deepgram
Speech-to-text transcription for voice experiences
Audio, transcripts, call metadata
United States
Cartesia
Text-to-speech synthesis for voice experiences
Generated response text and voice-session metadata
United States
OpenAI, Groq, Ollama Cloud, Cerebras, NVIDIA NIM
AI model inference for chat, menu analysis, operator tools, and voice workflows
Prompts, context, transcripts, menu data, and user-provided content
United States
Twilio and Telnyx
Telephony, SMS, webhook routing, and phone-number services
Phone numbers, call metadata, SMS content, voice routing data
United States
Resend
Transactional email delivery
Email addresses, message content, delivery metadata
United States
Stripe
Payments, subscriptions, invoices, and connected-account wallet features
Billing, payment, business, payout, and subscription data
United States
PostHog and Vercel Analytics
Product analytics, observability, performance, and event measurement
Usage events, device data, page views, and performance metadata
United States
Google, Square, Clover, Meta, and Composio
Optional connected integrations for places, point-of-sale sync, WhatsApp, Instagram, email, and operator workflows
Connected-account data, integration metadata, messages, menu, order, and business data
United States / provider region
Updates
We keep this list current as the stack changes.
Concya may update this page when we add, replace, or remove material sub-processors. Enterprise customers with a signed data processing agreement should follow the notice terms in that agreement.
Questions about this list or our privacy practices can be sent to privacy@concya.com.
For the broader description of how Concya collects, uses, shares, and retains data, see our Privacy Policy.