Skip to content
Get started

Service providers

Service providers — October 19, 2026

Holy Coders, LLC uses the providers below as needed for the feature you request. Some act as independent controllers for their own billing, security or communications records. A listed provider is not necessarily used for every call. Provider locations and retention depend on the service and account configuration; we do not promise exclusive data residency or zero provider retention.

For the data we collect, your choices, retention and requests, read the Privacy Notice at /privacy or contact privacy@opencalls.dev. We record material changes in the dated Privacy Notice and notify affected account holders through the account or account email where required.

Hosting and storage

Fly.io hosts the application and receives the account, request and call data needed to run it.

PlanetScale PostgreSQL stores account, call, agreement and financial records. Protected recovery archives follow a separate restricted retention process.

Cloudflare supports security, network delivery and transactional email. Email delivery processes the recipient and message needed for delivery.

Calling and AI processing

Twilio and Telnyx carry phone calls and process routing, participant numbers, live audio and communications usage records. Supported specialized routes may use Telnyx managed voice processing and Deepgram transcription.

OpenAI processes the audio, task context and bounded conversation evidence needed for supported voice, call decisions and quality review. Organization training-sharing settings and separate provider retention are different controls.

xAI may process audio, task context and tool results only for explicitly requested controlled administrator Grok voice tests. Listing this test route does not change ordinary customer routing.

Directory search, connections and optional messages

Google Places receives the directory search text you submit, including any location in that text, to return business names, addresses and contact details. This applies when directory search is available and you request it.

If you connect Google Calendar or Google Sheets, Google processes the authorization and the calendar or spreadsheet identifiers needed for the selected requests. Open Calls retrieves selected event or spreadsheet data. Calendar changes send the event details you approve, such as its title, description and times, to Google to create or update that event.

Slack receives the message title and text you approve through the incoming webhook destination you connect.

Where available and enabled, Twilio carries linked SMS and WhatsApp messages; WhatsApp (Meta) also processes the WhatsApp communications. These services receive the phone numbers, inbound text, message content, opt-out signals and delivery information needed for those communications. Result notices require your separate approval and contain a link that requires account sign-in to view the result; they do not send the call transcript or task details.

Optional Google Analytics measurement

Google Analytics processes public-page measurement after your separate opt-in, including public paths, fixed action and discovery categories, browser and IP information, and analytics cookie and session identifiers. It excludes account and call content. Diagnostics declines, Do Not Track and Global Privacy Control also disable this measurement. Cookie and provider retention are separate settings described in the Privacy Notice; turning measurement off does not itself erase data already held by Google.

Payments, optional diagnostics and support

Stripe processes payment credentials, transactions and subscription records; Open Calls does not store card numbers.

PostHog processes optional diagnostics, eligible masked interface replay and the account identifiers described in the Privacy Notice. Privacy choices apply separately from necessary service accounting and security.

Support messages pass through our company email delivery, forwarding and inbox services. Avoid sending passwords, access tokens, medical records or unnecessary sensitive call content. Contact privacy@opencalls.dev for the providers and handling relevant to a support request.

Privacy choices

Diagnostics run by default to help us improve Open Calls. They include page views, IP addresses and approximate location, browser errors, masked interface replay and pseudonymous activity summaries for learning. Sensitive information and call audio are excluded. Privacy choices, Do Not Track and Global Privacy Control disable optional diagnostics and campaign attribution.

Google Analytics is off until you enable it here. It measures visits and connection clicks on public pages using cookies. Google receives your IP address and browser information; account pages, call content, query strings and full referring addresses are excluded. Do Not Track, Global Privacy Control and turning off diagnostics also disable it. A saved diagnostics decline keeps it off until you change your diagnostics choice.