Legal
Subprocessors
Last updated October 9, 2026 · Pally Technologies, Inc.
These are the companies that process data on Pally’s behalf, what each one does, and where it operates. We keep this page current so you can see them without asking. AI model providers have their own section below.
Our Privacy Policy explains what we process and why, and our Terms of Service govern your use of Pally. Questions about anything here go to privacy@pally.com.
Current subprocessors
Pally shares data with each provider in this table only for the function listed, and never for advertising. Telegram and the merchants that issue a booking (Duffel, Kiwi.com, and Jinko) handle that data under their own terms and privacy policies, and so do Channel3's buy-link redirect and the retailer it opens. This list covers the service providers described in the How We Share It section of our Privacy Policy.
| Provider | Purpose | Key data processed | Region |
|---|---|---|---|
| Amazon Web Services | Cloud hosting and infrastructure | Account metadata, encrypted data in transit and at rest, system logs; Cloud Mac dedicated macOS instances (when the add-on is enabled) | US |
| Photon | Text message delivery (iMessage and RCS) | Messages, media, and any location you share, in transit between you and Pally | US |
| Linq | Text message delivery (iMessage, RCS, and SMS) for some Pally numbers | Messages, media, and any location you share, in transit between you and Pally | US |
| Telegram | Chat delivery when you connect Telegram | Messages and media you exchange with Pally in Telegram, in transit through Telegram's Bot API | UAE |
| Twilio | Phone-call carrier for calls with Pally | Call audio and phone numbers in transit, temporary outbound-call recordings, and recording metadata retained under Twilio's retention policy | US |
| AgentMail | Pally's own email address | Email sent and received with Pally's address | US |
| Composio | Connecting the apps you authorize (MCP access) | Authorization to connected accounts; Pally stores connection status, not OAuth tokens | US |
| Granola | Meeting-notes integration, when you connect it | Your meeting notes and transcripts, read when you ask and, while meeting follow-ups are on, after each recorded meeting | US |
| Monid | Public research, including looking up your own public social profiles and verifying or finding email addresses you ask for, and media creation, including image generation, photo editing, video, and music | Task-specific queries, handles, links, creative instructions, and images you ask Pally to process. Research queries may include names from your calendar, your own name and handles when Pally looks up your public profiles, and the email address, or the name and company domain, of a person whose email you ask Pally to verify or find. | US |
| Exa | Web search and reading public pages for questions and research you ask for, meeting follow-ups, and looking up your own public profiles | The search query or page link needed for the lookup, which can include names from your calendar when Pally preps a meeting, a question left open in a meeting you recorded, and your own name and work details when Pally looks you up | US |
| Parallel | Web search for questions and research you ask for, meeting follow-ups, and looking up your own public profiles | The search query needed for the lookup, which can include names from your calendar, a question left open in a meeting you recorded, and your own name and work details | US |
| Parse | Live availability and price reads from restaurant, event, home-listing, and retail sites | Search details (site, dates, filters); no account credentials | US |
| Ophelia | Live restaurant table availability, and OpenTable and Resy table reservations you ask Pally to make | Restaurant, city, date, time, and party size; for a reservation, your first and last name, mobile number, email, and the verification code the restaurant platform texts you; no card details | US |
| Channel3 | Product search results and affiliate buy links for things you ask Pally to find | Product search text with price and country filters; no name, phone number, email address, or account identifier. Its redirect records clicks on buy links and purchases made through them, for commission attribution | US |
| Kernel | Secure browsing, account sign-in, and Link wallet checkout you direct | Encrypted session credentials, your Link wallet connection, and the merchant, amount, and description of each Link purchase, plus page content and actions for the tasks you request | US |
| Bright Data | Access to public pages Pally reads for you, including your own public LinkedIn profile | Page content and actions for the tasks you request, and the profile link Pally looks up | US |
| Plaid | Bank account linking, read-only | Account balances and transactions you authorize | US |
| Stripe | Subscription billing, card processing for flight bookings, and the Link wallet that issues one-time virtual cards for purchases you approve | Payment details, and the merchant, amount, and description of each Link purchase you approve; we do not store full card numbers | US |
| Duffel | Flight booking and flight payment processing (merchant of record) | Traveler booking details (name, date of birth, gender, title, email, phone) and flight payment transactions | UK/US |
| Kiwi.com | Flight search and hosted checkout for some fares (Kiwi.com is the merchant for those bookings) | Trip search details (route, dates, traveler count) and, when you book on Kiwi.com's checkout, the traveler and payment details you enter there | EU |
| Jinko | Flight, hotel, and rental car booking (Jinko issues the booking and is the merchant) | Traveler details the booking needs (name, date of birth, gender, nationality, email, phone, and passport or driver details when required), trip search details, and the payment you approve on Jinko's checkout | EU/US |
| Google Analytics | Aggregated website analytics for pally.com | Aggregated page usage; never used for advertising | US |
| Task-specific services | Narrow lookups for tasks you request, such as flight status or weather | Only the specific query needed for that task | US |
AI model providers
Pally sends your request and the task context for each turn to an AI model. Most turns go through OpenRouter, which sends each one to a host below that does not use your data to train models. No provider here trains models on your data.
| Provider | Purpose | Key data processed | Region |
|---|---|---|---|
| OpenRouter | Routing each model turn to one of the hosts below | Your request and the task context for the turn | US |
| Google (Gemini API and Vertex AI) | Running Gemini models for conversations and tasks | Your request and the task context for the turn | US |
| OpenAI | Running OpenAI models for conversations, tasks, and phone calls, plus transcription, speech, and memory search | Your request and the task context for the turn, call audio during a call, and voice notes Pally transcribes | US |
| Anthropic | Running Claude models for some turns | Your request and the task context for the turn | US |
| Microsoft Azure | Running OpenAI models for some turns | Your request and the task context for the turn | US |
| Phala, Novita, Together AI, Modal, and Baseten | Running open-weight models for some conversation and task steps | Your request and the task context for the turn | US |
Advertising measurement
Meta is not a subprocessor. Pally's ad campaign pages load the Meta Pixel to measure our ads, and Meta uses that data under its own privacy policy, including for its own advertising. Referral, personal invite, and founder gift pages do not load it. The Cookies and Tracking section of our Privacy Policy explains how to limit it.
| Company | Purpose | Key data processed | Region |
|---|---|---|---|
| Meta Platforms | Measuring Pally's ads through the Meta Pixel on ad campaign pages | Page views and Text Pally taps with the campaign code, page address and campaign tags, referring website, IP address, browser and device information, and Meta cookie IDs | US |
Changes to this list
We update this page when a subprocessor is added or removed, and the date above shows the last change. To be told in advance about additions, email privacy@pally.com and we will add you to the notification list.