Legal
Subprocessor List
Current list of third-party subprocessors used by motel4.ai to deliver the AI receptionist service, including their purpose and data processing location.
Template — not legal advice
These pages are starting points for policies and disclosures. Have qualified counsel review and adapt them before you rely on them for compliance, contracts, or guest-facing commitments.
Current list of third-party subprocessors used by motel4.ai to deliver the AI receptionist service, including their purpose and data processing location.
For product questions or a walkthrough, use Contact — not a substitute for legal review of these documents.
About this list
Under GDPR Article 28 and comparable privacy laws, we are required to inform our customers (data controllers) about the third-party subprocessors we engage to process personal data. This page lists all current subprocessors. We notify customers at least 30 days before engaging a new subprocessor that handles personal data. To receive subprocessor change notifications, contact privacy@motel4.ai.
Telephony infrastructure
Telnyx LLC — call routing, phone number provisioning, SIP trunking, and SMS delivery. Processes caller phone numbers, call audio (real-time, not stored by Telnyx), call metadata (timestamps, duration, disposition), and SMS message content. Data processing location: United States.
AI and speech processing
Deepgram Inc. — real-time speech-to-text transcription. Processes call audio in real time to generate text transcripts. Audio is processed in memory and not retained by Deepgram after transcription. Data processing location: United States.
AI language model
Google LLC (via OpenRouter) — large language model inference for generating AI receptionist responses. Processes transcribed caller text and property context to generate conversational responses. Input and output text are not used for model training. Data processing location: United States.
Application hosting
Oracle Corporation — cloud infrastructure hosting for the SaaS dashboard, API, PostgreSQL database, voice agent, CRM, and internal tools. Processes and stores account data, property data, conversation logs, operational records, and billing metadata. Data processing location: United States.
Voice agent hosting
Oracle Corporation — cloud infrastructure hosting for the LiveKit voice agent server, CRM, and GTM tools. Processes call routing, voice agent execution, and CRM data. Data processing location: United States (Oracle Cloud, Ampere ARM).
CDN and edge computing
Cloudflare Inc. — content delivery network, DNS, DDoS protection, cookie-free web performance analytics, and edge Workers (SMS receptionist, SEO prerender). Processes web traffic, aggregate page-performance events, DNS queries, and SMS webhook routing. Data processing location: global edge network (nearest PoP to visitor).
Payment processing
Stripe Inc. — subscription billing, payment processing, and invoicing. Processes payment card details, billing addresses, and transaction records. Stripe is PCI DSS Level 1 certified. motel4.ai does not store payment card numbers — all card data is handled directly by Stripe. Data processing location: United States.
Analytics
Ahrefs Pte. Ltd. — cookie-free aggregate Web Analytics on public marketing routes. Receives query/hash-free page paths, referrer information constrained by our referrer policy, browser/device data, and coarse daily traffic metrics; Ahrefs states that raw IP addresses are discarded and no persistent identifier is used. Its built-in public link and form events include destination or action URLs, not form values. PostHog Inc. — consent-controlled browser product analytics and account-scoped operational event tracking. Processes pseudonymous internal account and resource identifiers, sanitized feature and page interactions, campaign/referrer attribution, performance, exception, heatmap, replay, survey, product-tour, experiment, and feature-flag metadata. Form inputs and marked private areas are masked, text is masked in replay, and our event sanitizer removes account-owner email, property or guest names, call audio, transcripts, caller phone numbers, message content, credentials, raw DOM element payloads, and URL query strings or fragments from ordinary events before they leave the browser. Data processing location: Ahrefs infrastructure and PostHog Cloud US.
Scheduling and product feedback
Cal.com Inc. (self-hosted at cal.motel4.ai) — demo scheduling, availability, and booking management. Processes contact and appointment details submitted by the person booking. Formbricks GmbH (self-hosted at surveys.motel4.ai) — in-product surveys and feedback. Processes account identifiers, account-owner email when provided, survey responses, and display history. Data processing location: United States-hosted motel4.ai infrastructure unless a connected calendar or email provider requires otherwise.
Error monitoring
Sentry (Functional Software Inc.) — application error tracking and performance monitoring. Processes sanitized error stack traces, route paths, request methods, response status codes, and performance metrics. Our configuration disables Session Replay and default PII and is designed to exclude account identity, request bodies, cookies, headers, IP addresses, URL query strings and fragments, attachments, and common contact or credential data. Data processing location: United States.
Changes to this list
This list was last updated July 2026. We review and update this list whenever subprocessors are added, removed, or materially change their data processing activities. Customers are notified at least 30 days before a new subprocessor begins processing personal data. If you have questions or wish to object to a subprocessor change, contact privacy@motel4.ai.