Legal
Subprocessors
Last updated September 20, 2026 · Pally Technologies, Inc.
These are the companies that process data on Pally’s behalf, what each one does, and where it operates. We keep this page current so you can see the full list without asking.
Our Privacy Policy explains what we process and why, and our Terms of Service govern your use of Pally. Questions about anything here go to [email protected].
Current subprocessors
Each company below processes data on Pally's behalf under a data-processing agreement, only for the function listed, and never for advertising. This list covers the categories described in the Service Providers section of our Privacy Policy.
| Provider | Purpose | Key data processed | Region |
|---|---|---|---|
| Amazon Web Services | Cloud hosting and infrastructure | Account metadata, encrypted data in transit and at rest, system logs; Cloud Mac dedicated macOS instances (when the add-on is enabled) | US |
| Photon | Text message delivery (iMessage and RCS) | Messages, media, and any location you share, in transit between you and Pally | US |
| Linq | Text message delivery (iMessage, RCS, and SMS) for some Pally numbers | Messages, media, and any location you share, in transit between you and Pally | US |
| Telegram | Chat delivery when you connect Telegram | Messages and media you exchange with Pally in Telegram, in transit through Telegram's Bot API | UAE |
| Twilio | Phone-call carrier for calls with Pally | Call audio and phone numbers in transit, temporary outbound-call recordings, and recording metadata retained under Twilio's retention policy | US |
| AgentMail | Pally's own email address on Pally Max | Email sent and received with Pally's address | US |
| Composio | Connecting the apps you authorize (MCP access) | Authorization to connected accounts; Pally stores connection status, not OAuth tokens | US |
| Granola | Meeting-notes integration, when you connect it | Your meeting notes, accessed on demand as authorized | US |
| Monid | Requested public research and media creation, including image generation, photo editing, video, and music | Task-specific queries, handles, links, creative instructions, and images you ask Pally to process. Research queries may include names from your calendar. | US |
| Exa | Web search and reading public pages for questions and research you ask for | The search query or page link needed for the lookup, which can include names from your calendar when Pally preps a meeting | US |
| Parse | Live availability and price reads from restaurant, event, home-listing, and retail sites | Search details (site, dates, filters); no account credentials | US |
| Kernel | Secure browsing and account sign-in you direct | Encrypted session credentials, plus page content and actions for the tasks you request | US |
| Bright Data | Access to public pages Pally reads for you | Page content and actions for the tasks you request | US |
| Plaid | Bank account linking, read-only | Account balances and transactions you authorize | US |
| AgentCard | Saved-card checkout and single-use virtual cards for purchases you approve | Approved amount and checkout details; card numbers are never stored by Pally | US |
| Stripe | Subscription billing, and card processing for flight bookings | Payment details; we do not store full card numbers | US |
| Duffel | Flight booking and flight payment processing (merchant of record) | Traveller booking details (name, date of birth, gender, title, email, phone) and flight payment transactions | UK/US |
| Kiwi.com | Flight search and hosted checkout for some fares (Kiwi.com is the merchant for those bookings) | Trip search details (route, dates, traveller count) and, when you book on Kiwi.com's checkout, the traveller and payment details you enter there | EU |
| Google Analytics | Aggregated website analytics for pally.com | Aggregated page usage; never used for advertising | US |
| Task-specific services | Narrow lookups for tasks you request, such as flight status or weather | Only the specific query needed for that task | US |
AI model providers
Pally sends your request and the task context for a turn to AI model providers, and routes between them as models change. Every provider we use is under a privacy policy and API data commitments that keep your content out of model training. If you need the current provider names for a vendor review, email [email protected].
Changes to this list
We update this page when a subprocessor is added or removed, and the date above shows the last change. To be told in advance about additions, email [email protected] and we will add you to the notification list.