Saaya engages the third parties listed below to deliver the Service. They are bound by data-protection terms that are no less protective than those in our Data Processing Agreement — that is, by the Indian Data Protection Laws applicable to Saaya as a Data Processor.
We update this list when we add, remove, or change a Sub-processor. Per Section 9 of the DPA, we notify customers of new additions at least 30 days before they take effect, through the dashboard and by email to the workspace contacts on file.
For Indian customers with sectoral data-localisation requirements (RBI digital-lending or payment-system rules, IRDAI rules, and similar), we flag the Hosted in India column so you can choose providers that keep data inside India for the relevant flow. Where this column says "Outside India," choosing that provider will result in your end-user data being processed outside India for that feature.
Customers can subscribe to change notifications by writing to info@illusionart.ai with the subject "[Subprocessor updates]".
AI model providers
Routed to only when the Customer's agent configuration selects them. Not all of these are active in every workspace.| Provider | Role | Data processed | Hosted in India? | Privacy policy | |---|---|---|---|---| | OpenAI | LLM, STT (Whisper) | Prompts, retrieved context, conversation history | No | openai.com/policies/privacy-policy | | Anthropic | LLM | Prompts, retrieved context, conversation history | No | anthropic.com/privacy | | Google | LLM (Gemini), STT, TTS | Prompts, retrieved context, conversation history, audio | Optional regional | policies.google.com/privacy | | Sarvam | LLM, STT, TTS (Indic-language) | Prompts, audio, transcripts | Yes | sarvam.ai | | ElevenLabs | TTS, voice-clone | Text input, audio | No | elevenlabs.io/privacy-policy | | Deepgram | STT | Audio | No | deepgram.com/privacy | | Cartesia | TTS | Text input, audio | No | cartesia.ai |
Real-time media
| Provider | Role | Data processed | Hosted in India? | Privacy policy | |---|---|---|---|---| | LiveKit | WebRTC SFU for real-time voice and video | Media streams; signalling metadata | Optional regional | livekit.io/privacy |Telephony & messaging
| Provider | Role | Data processed | Hosted in India? | Privacy policy | |---|---|---|---|---| | Twilio | PSTN telephony, SMS | Phone numbers; call audio metadata; SMS content | Multi-region (India edge available) | twilio.com/legal/privacy | | Meta (WhatsApp Business) | WhatsApp messaging | Phone numbers; message content; delivery metadata | No | whatsapp.com/legal |Avatar providers
Engaged only when a Customer enables an avatar on a video agent.| Provider | Role | Data processed | Hosted in India? | Privacy policy | |---|---|---|---|---| | Anam | Photoreal avatar rendering | Audio; agent script; session metadata | No | anam.ai | | Simli | Avatar rendering | Audio; agent script; session metadata | No | simli.com | | Tavus | Avatar rendering, voice clone | Audio; agent script; session metadata | No | tavus.io/privacy | | AvatarIO | Avatar rendering | Audio; agent script; session metadata | No | provided on request | | AvatarTalk | Avatar rendering | Audio; agent script; session metadata | No | provided on request | | LiveAvatar | Avatar rendering | Audio; agent script; session metadata | No | provided on request | | TruGen | Avatar rendering | Audio; agent script; session metadata | No | provided on request |
Hosting & infrastructure
| Provider | Role | Data processed | Hosted in India? | Privacy policy | |---|---|---|---|---| | Vercel | CDN + hosting for marketing (saaya.ai) and dashboard SPA (app.saaya.ai) | Request metadata | Multi-region (India edge available) | vercel.com/legal/privacy-policy | | Cloud-hosting provider | Compute, network, managed databases for the FastAPI backend, worker fleet, Postgres, MongoDB, Redis, Qdrant | All Customer Data | Yes (primary region: India) | provided on request | | Object-storage provider | Backups, large recordings | Customer Data backups | Yes | provided on request |Observability & monitoring
| Provider | Role | Data processed | Hosted in India? | Privacy policy | |---|---|---|---|---| | Sentry | Error tracking for backend and dashboard | Error stack traces; request metadata; user IDs (where included) | No | sentry.io/privacy | | Loki / Grafana | Log aggregation, dashboards | Application logs; request metadata | Self-hosted in India where possible | as configured |Operations
| Provider | Role | Data processed | Hosted in India? | Privacy policy | |---|---|---|---|---| | Razorpay | INR payments (UPI, cards, netbanking) | Billing details; transaction metadata | Yes | razorpay.com/privacy | | Stripe | International card payments (where required) | Billing details; transaction metadata | No | stripe.com/privacy | | Transactional email provider | Account, security, and billing email delivery | Email addresses; message content | Multi-region | as configured | | Customer-support tool | Inbound support ticketing | Support correspondence | Multi-region | as configured |Subscribe to changes
To be notified by email when this list changes, send a message with the subject "[Subprocessor updates] subscribe" to info@illusionart.ai. To unsubscribe, send the same subject with "unsubscribe" in the body.Changes
| Date | Change | |---|---| | April 27, 2026 | Initial publication. |Version history
- v1.0 · Initial publication.