Saaya engages the third parties listed below to deliver the Service. They are bound by data-protection terms that are no less protective than those in our Data Processing Agreement, that is, by the Indian Data Protection Laws applicable to Saaya as a Data Processor.
We update this list when we add, remove, or change a Sub-processor. Per Section 9 of the DPA, we notify customers of new additions at least 30 days before they take effect, through the dashboard and by email to the workspace contacts on file.
For Indian customers with sectoral data-localisation requirements (RBI digital-lending or payment-system rules, IRDAI rules, and similar), we flag the Hosted in India column so you can choose providers that keep data inside India for the relevant flow. Where this column says "Outside India," choosing that provider will result in your end-user data being processed outside India for that feature.
Customers can subscribe to change notifications by writing to info@illusionart.ai with the subject "[Subprocessor updates]".
AI model providers
Routed to only when the Customer's agent configuration selects them. Not all of these are active in every workspace.
| Provider | Role | Data processed | Hosted in India? | Privacy policy | |---|---|---|---|---| | Language model & speech-to-text provider | LLM, STT | Prompts, retrieved context, conversation history | No | provided on request | | Language model provider | LLM | Prompts, retrieved context, conversation history | No | provided on request | | Language & speech provider | LLM, STT, TTS | Prompts, retrieved context, conversation history, audio | Optional regional | provided on request | | Indic-language model & speech provider | LLM, STT, TTS (Indic-language) | Prompts, audio, transcripts | Yes | provided on request | | Neural voice & voice-clone provider | TTS, voice-clone | Text input, audio | No | provided on request | | Speech-to-text provider | STT | Audio | No | provided on request | | Neural voice provider | TTS | Text input, audio | No | provided on request | | Image-generation provider | Image generation for handwritten study-note sheets | The note topic and outline text, sent as the image prompt; the rendered image returned | No | provided on request |
The image-generation provider differs from the rest of this table in one respect: the provider itself is not selectable. Enabling the handwritten-notes function on an agent routes that function to this provider and no other. Switching the function off on the agent is the way to avoid it.
Real-time media
| Provider | Role | Data processed | Hosted in India? | Privacy policy | |---|---|---|---|---| | Real-time media provider | WebRTC SFU for real-time voice and video | Media streams; signalling metadata | Optional regional | provided on request |
Telephony & messaging
| Provider | Role | Data processed | Hosted in India? | Privacy policy | |---|---|---|---|---| | Telephony & SMS provider | PSTN telephony, SMS | Phone numbers; call audio metadata; SMS content | Multi-region (India edge available) | provided on request | | Business-messaging provider | Business messaging | Phone numbers; message content; delivery metadata | No | provided on request |
Avatar providers
Engaged only when a Customer enables an avatar on a video agent.
| Provider | Role | Data processed | Hosted in India? | Privacy policy | |---|---|---|---|---| | Avatar rendering provider | Photoreal avatar rendering | Audio; agent script; session metadata | No | provided on request | | Avatar rendering provider | Avatar rendering | Audio; agent script; session metadata | No | provided on request | | Avatar rendering provider | Avatar rendering, voice clone | Audio; agent script; session metadata | No | provided on request | | Avatar rendering provider | Avatar rendering | Audio; agent script; session metadata | No | provided on request | | Avatar rendering provider | Avatar rendering | Audio; agent script; session metadata | No | provided on request | | Avatar rendering provider | Avatar rendering | Audio; agent script; session metadata | No | provided on request | | Avatar rendering provider | Avatar rendering | Audio; agent script; session metadata | No | provided on request |
Hosting & infrastructure
| Provider | Role | Data processed | Hosted in India? | Privacy policy | |---|---|---|---|---| | Edge hosting & CDN provider | CDN + hosting for marketing (saaya.ai) and dashboard SPA (app.saaya.ai) | Request metadata | Multi-region (India edge available) | provided on request | | Cloud-hosting provider | Compute, network, and managed databases for Saaya's backend, worker fleet, and data stores | All Customer Data | Yes (primary region: India) | provided on request | | Object-storage provider | Backups, large recordings | Customer Data backups | Yes | provided on request |
Analytics & measurement
| Provider | Role | Data processed | Hosted in India? | Privacy policy | |---|---|---|---|---| | Web analytics & measurement provider | Loads measurement tags on saaya.ai and app.saaya.ai; page-view, event, and conversion analytics | IP address; pseudonymous client IDs; page-view and event metadata | Multi-region (no India residency) | provided on request |
Observability & monitoring
| Provider | Role | Data processed | Hosted in India? | Privacy policy | |---|---|---|---|---| | Error-tracking provider | Error tracking for backend and dashboard | Error stack traces; request metadata; user IDs (where included) | No | provided on request | | Log aggregation & dashboards (self-managed) | Log aggregation, dashboards | Application logs; request metadata | Self-hosted in India where possible | as configured |
Operations
| Provider | Role | Data processed | Hosted in India? | Privacy policy | |---|---|---|---|---| | Domestic payments provider | INR payments (UPI, cards, netbanking) | Billing details; transaction metadata | Yes | provided on request | | International payments provider | International card payments (where required) | Billing details; transaction metadata | No | provided on request | | Transactional email provider | Account, security, and billing email delivery | Email addresses; message content | Multi-region | as configured | | Customer-support tool | Inbound support ticketing | Support correspondence | Multi-region | as configured |
Subscribe to changes
To be notified by email when this list changes, send a message with the subject "[Subprocessor updates] subscribe" to info@illusionart.ai. To unsubscribe, send the same subject with "unsubscribe" in the body.
Changes
| Date | Change | |---|---| | August 18, 2026 | Added the image-generation provider used by the handwritten-notes function. | | April 27, 2026 | Initial publication. |
Version history
- v1.2 · Cookie policy: named the real session cookies (saaya_access, saaya_refresh, saaya_csrf), documented saaya-consent-v2 and the Accept all / Reject non-essential / Manage / Cookie settings control on marketing, dashboard, and admin, and listed Clarity cookies when the tag manager loads them. Jurisdiction remains India / DPDP Act.
- v1.1 · Children’s data (Privacy §10) rewritten: we do not verify age and do not collect or store parental consent, and the customer deploying an agent children can reach is the Data Fiduciary for it. Cross-border processing (§7) now says the handwritten study-notes function runs on a single US-based image-generation provider that is not selectable in the dashboard. Retention (§8) corrected: agents and knowledge bases can be deleted in the dashboard, call records and transcripts cannot, and removal is a written request. A row for the image-generation provider was added to the sub-processor list, and the DPA processing description and sub-processor categories were extended to cover generated images.
- v1.0 · Initial publication.