To run Payani.ai we use a small number of other companies. Some of them handle personal information, either yours or your contacts'. This page lists all of them, what they do, and where they process data.
We hold each of these companies to contractual terms requiring them to protect the data they handle for us, and to use it only to provide their service to us.
Always used
These are part of the platform. Every customer's data passes through them.
| Company | What it does for us | Data it handles | Location |
|---|---|---|---|
| Vercel | Hosts the application | Anything you view or submit in the app, in transit | United States |
| Supabase | Database, file storage, and login | Your account, your contacts, companies, deals, and all workspace content | United States, Northern California |
| Amazon Web Services, SES | Sends your email | Recipient addresses, email content, delivery and bounce events | United States, Ohio (us-east-2) |
| Amazon Web Services, S3 | Stores files and generated media | Uploads, generated images, video, and audio | United States |
| Stripe | Payments and subscriptions | Your name, billing email, card details, invoices. We never see full card numbers | United States |
| Anthropic | AI text generation | The content you ask the AI to work with, sent per request | United States |
| OpenAI | AI image generation | Image prompts and the images produced | United States |
| fal.ai | AI video and audio generation | Prompts, and the media produced | United States |
| BeFound | AI search visibility audits and analysis | Your website address and public page content | United States |
| Firecrawl | Fetches your website pages during an audit, where our own fetch is blocked | Your website address and public page content | United States |
Used only if you connect them
These handle data only when you choose to connect the relevant account or feature.
| Company | What it does | When it applies | Location |
|---|---|---|---|
| GitHub | Holds the repository we write website fixes and articles to | If you connect a website repository | United States |
| Sign in, calendar availability, Google Meet links, and Google Analytics data | If you sign in with Google, connect a calendar, or connect GA4 | United States | |
| Sign in, and publishing posts to your personal profile | If you sign in with LinkedIn or connect it for posting | United States | |
| IPinfo | Looks up which company a website visitor's IP address belongs to | If you use website visitor tracking | United States |
| EngageBeast | Social inbox, comment and message replies | If you use social engagement features | United States, Virginia (us-east-1) |
Where your data is stored
Your account and CRM data is stored in the United States, in Northern California.
Email is sent from and delivery events are processed in Ohio. Some subprocessors may process data in other locations, as noted above.
We do not currently offer data residency in the EU, UK, or anywhere outside the United States.
AI providers and model training
We do not use your data to train AI models.
Our AI providers are covered by different terms, so we describe each one separately rather than making a single claim.
Anthropic, which handles text generation. Anthropic's Commercial Terms of Service, which govern API use, state that Anthropic may not train models on customer content from the services. Your inputs and the outputs generated from them are excluded from training.
OpenAI, which handles image generation. Data sent to the OpenAI API has not been used to train or improve OpenAI models since 1 March 2023, unless a customer explicitly opts in. We have not opted in. OpenAI retains API inputs and outputs for up to 30 days for abuse monitoring, after which they are deleted.
fal.ai, which handles video and audio generation. fal.ai's standard terms allow it to use anonymised or aggregated data, which may be derived from customer inputs, to develop its own products and AI models. We cannot make the same no-training commitment for fal.ai that we can for Anthropic and OpenAI.
What we send to fal.ai is limited to the prompts and reference material you provide when generating a video or a podcast. We do not send your CRM contact data, your email lists, or your customer records to fal.ai. If you do not want your creative prompts handled on those terms, do not use the video and podcast generation features. Everything else in the platform works without them.
Changes to this list
We add and remove subprocessors as the product changes.
When we add a new subprocessor that handles personal data, we will update this page and, where we are required to, tell customers by email before it starts.
To be told about changes, email privacy@payani.ai and ask to be added to the subprocessor notification list.
Questions
Email privacy@payani.ai.
Payani Media LLC, doing business as Payani.ai 600 California Street, Floor 11, San Francisco, CA 94108