Skip to content
lightspire

Technical details

Sub-processors

Last updated 2026-10-16 · 14 providers

The providers Lightspire uses to run the service, what each one receives, where it processes and stores it, and for how long. We store your business's data in Sydney, Australia; to answer a call in real time, its audio and words are processed in the United States. More in our privacy policy.

Sub-processors at a glance
#ProviderRegion
01SupabaseAU · ap-southeast-2
02VercelAU · syd1
03VapiUS
04Deepgram (through Vapi)US
05OpenAIUS
06AnthropicUS
07Google Gemini (through Vapi)US
08Cartesia (through Vapi)US
09ElevenLabs and Inworld (through Vapi)US
10TelnyxUS · AU numbers
11ResendUS
12PostHogUS
13StripeUS +
14Google Calendar, Microsoft Outlook and CalendlyVaries
  1. 01

    Supabase

    AU · ap-southeast-2
    What it does
    Our database, sign-in and file storage.
    What it receives
    Accounts, business details, calls, transcripts, summaries, call recordings, bookings and caller details.
    Where it's processed
    Sydney, Australia (Amazon Web Services, ap-southeast-2).
    Where it's stored
    Sydney, Australia.
    How long it's kept
    While the account is open. Recordings for the time the business chooses (12 months unless it picks 30, 90 or 365 days). Deleted when the account is closed, except billing records kept for five years under tax law.
  2. 02

    Vercel

    AU · syd1
    What it does
    Runs the website, the dashboard and our servers.
    What it receives
    Each request to the site and the app, including call events from Vapi.
    Where it's processed
    Sydney, Australia. The first check of each page request runs at Vercel's nearest network location, which can be outside Australia.
    Where it's stored
    Nothing, except short-lived request logs.
    How long it's kept
    Request logs for a few days.
  3. 03

    Vapi

    US
    What it does
    Runs each phone call with the AI voice agent.
    What it receives
    The call's audio, what is said, and the caller's number.
    Where it's processed
    United States.
    Where it's stored
    United States: each call's transcript and technical logs. Recordings go straight to Sydney.
    How long it's kept
    Until the call's recording is deleted; we then delete Vapi's copy of the call.
  4. 04

    Deepgram (through Vapi)

    US
    What it does
    Turns the caller's speech into text during the call.
    What it receives
    The caller's audio.
    Where it's processed
    United States.
    Where it's stored
    Nothing is stored there for Lightspire.
    How long it's kept
    Used only while the call is in progress.
  5. 05

    OpenAI

    US
    What it does
    Writes the AI voice agent's replies during a call, the call summary, and checks of call quality.
    What it receives
    What is said on the call, and the business's details the voice agent needs.
    Where it's processed
    United States.
    Where it's stored
    United States, for abuse monitoring only. Never used to train OpenAI's models.
    How long it's kept
    Up to 30 days.
  6. 06

    Anthropic

    US
    What it does
    Checks the quality of calls, so we can find and fix mistakes the AI voice agent makes.
    What it receives
    Call transcripts and call details.
    Where it's processed
    United States.
    Where it's stored
    United States, only as long as Anthropic needs it to provide the service. Never used to train Anthropic's models.
    How long it's kept
    A limited time under Anthropic's commercial terms, then deleted.
  7. 07

    Google Gemini (through Vapi)

    US
    What it does
    Vapi's after-call analysis: a short summary and the key details of each call.
    What it receives
    The call's transcript.
    Where it's processed
    United States.
    Where it's stored
    Nothing is stored there for Lightspire.
    How long it's kept
    Used only while the analysis runs.
  8. 08

    Cartesia (through Vapi)

    US
    What it does
    Speaks the AI voice agent's replies.
    What it receives
    The text of each reply, which can include the caller's name or booking details read back.
    Where it's processed
    United States.
    Where it's stored
    Nothing is stored there for Lightspire.
    How long it's kept
    Used only while the call is in progress.
  9. 09

    ElevenLabs and Inworld (through Vapi)

    US
    What it does
    Speak the replies on two of the demo phone lines on our Voice samples page. Not used for businesses' calls.
    What it receives
    The text of each reply on those demo calls.
    Where it's processed
    United States.
    Where it's stored
    Nothing is stored there for Lightspire.
    How long it's kept
    Used only while the call is in progress.
  10. 10

    Telnyx

    US · AU numbers
    What it does
    Our Australian phone numbers, carrying calls to them, and text messages.
    What it receives
    The caller's number, the call's audio while it passes through, and the content of texts.
    Where it's processed
    Call audio passes through Telnyx's network on its way to Vapi. Texts are sent through Telnyx in the United States.
    Where it's stored
    Call and text records (numbers, times and length) in the United States.
    How long it's kept
    As long as Telnyx needs them for billing and the law.
  11. 11

    Resend

    US
    What it does
    Sends emails, such as new booking and message alerts.
    What it receives
    Email addresses and what the email says, which can include a caller's name, number and message.
    Where it's processed
    United States.
    Where it's stored
    United States.
    How long it's kept
    Delivery logs for a limited time.
  12. 12

    PostHog

    US
    What it does
    Product analytics and error reports.
    What it receives
    Pages visited, clicks and errors. In the dashboard it never receives what's on the screen, and phone numbers are removed from everything it receives.
    Where it's processed
    United States.
    Where it's stored
    United States.
    How long it's kept
    While useful for improving the service. Never call recordings or transcripts.
  13. 13

    Stripe

    US +
    What it does
    Payments for plans and top-ups.
    What it receives
    The business's billing details and card. We never see the full card number.
    Where it's processed
    Stripe's systems, including the United States.
    Where it's stored
    Stripe's systems, including the United States.
    How long it's kept
    As Australian tax law requires (five years).
  14. 14

    Google Calendar, Microsoft Outlook and Calendly

    Varies
    What it does
    Only when a business connects one: checking free times and adding bookings.
    What it receives
    Booking details: the caller's name, the time and the contact details they gave.
    Where it's processed
    Where that provider operates.
    Where it's stored
    In the business's own calendar.
    How long it's kept
    Under the business's control in its own account.