Sub-processors

1. Voice and transcript processing

Purpose:converting voice to text (speech-to-text) and generating the assistant's voice response (text-to-speech).

Data processed: call audio, generated transcripts, call metadata (duration, caller number).

Jurisdiction: European Union (processing). Where the provider is a US entity, the potential transfer is covered by Standard Contractual Clauses (SCCs) and supplementary measures.

2. Real-time communications infrastructure

Purpose: transporting audio streams in real time between the caller and the virtual assistant (media routing, no content storage).

Data processed: audio streams in transit (ephemeral, not recorded by this sub-processor), technical session metadata.

Jurisdiction: the provider is a US entity; the potential transfer is covered by Standard Contractual Clauses (SCCs) and supplementary measures.

3. Telephony and phone numbers

Purpose: providing the phone numbers on which virtual assistants run, and connectivity to public telephony networks for inbound and outbound calls.

Data processed: caller phone numbers, call duration, numbers leased for client accounts.

Jurisdiction: European Union.

4. Large language models (LLM)

Purpose: conversational understanding for the virtual assistant and context-aware response generation. Access is routed exclusively through European infrastructure.

Data processed: conversation context sent to the language model during calls (transcript fragments, system instructions, short call history).

Jurisdiction: European Union.

5. Database and authentication

Purpose: storing client accounts, call logs, appointments, assistant configurations, and user authentication for the dashboard.

Data processed: application data, accounts and credentials, client data, call logs, appointments, assistant configurations.

Jurisdiction: European Union.

6. Transactional email

Purpose: delivering emails to you (welcome, trial reminders, daily summaries, call and appointment notifications, payment confirmations).

Data processed: email address, content of sent emails.

Jurisdiction: European Union (processing). The provider is a US entity; the potential transfer is covered by Standard Contractual Clauses (SCCs) and supplementary measures.

7. Payment processing

Purpose: processing subscription payments, issuing invoices, and the customer portal for managing payment methods. PCI DSS compliant: card data is tokenized by the sub-processor. We never store it on our servers.

Data processed: billing details (name, address, tax ID if applicable), card token (not the full number).

Jurisdiction: European Union.

Complete list of vendors

For the detailed list of specific vendors (names, exact jurisdictions, links to their privacy policies, contract signing dates, versions of their DPAs), see the Data Processing Agreement (DPA). You can download it from your account after signup or request it at contact@liniadirecta.ro.

Changes and notifications

We will notify you by email before adding or replacing a sub-processor, with at least 30 days' notice prior to the change taking effect. You have the right to object to significant changes under Article 28(2) GDPR; in case of substantiated disagreement, you may terminate the contract without penalty through the end of the current billing cycle.

Contact

For any question about our sub-processors or how your data is processed: contact@liniadirecta.ro.

Operator: Digital Leadership SRL, Tax ID 38585123, J2017006715126, Strada Viorelelor 17A, 407039 Dezmir, Cluj, Romania.