Sub-processors
Heyloha relies on a small number of specialist providers. This page lists them, what they do for us, which data they receive and where it is processed.
Last changed: 9 October 2026
The platform
These providers support Heyloha's channels and features. If you don't use a channel, such as phone, no data goes to the provider behind it.
OpenAI Ireland Ltd.
Language model: drafting replies, searching the knowledge base and voice on phone calls
- Data
- Conversation content (after pseudonymisation), uploaded files, conversation IDs
- Location
- Ireland (EU), transfer to the United States
- Transfers outside the EU
- EU-US Data Privacy Framework and Standard Contractual Clauses
Langfuse GmbH
Quality monitoring of agent replies
- Data
- Conversation text with personal data irreversibly removed, chat and brand IDs, quality scores
- Location
- Ireland (EU), backups in Germany
- Transfers outside the EU
- None, processed within the EU
Twilio Inc.
Telephony: carrying calls, with no recording
- Data
- Phone numbers, live audio during the call, call metadata, number registration documents
- Location
- United States, with EU storage if selected
- Transfers outside the EU
- Standard Contractual Clauses
Unipile
Connection to WhatsApp, Instagram, LinkedIn and email
- Data
- Credentials of connected accounts, messages, emails and attachments
- Location
- European Union
- Transfers outside the EU
- Standard Contractual Clauses
Stripe
Payments
- Data
- Billing details of Heyloha customers
- Location
- Ireland (EU) and United States
- Transfers outside the EU
- Standard Contractual Clauses
Mailgun (Sinch)
System emails: sign-up, password reset and notifications
- Data
- Recipient email address, message content
- Location
- European Union
- Transfers outside the EU
- Standard Contractual Clauses
Sentry (Functional Software, Inc.)
Error monitoring
- Data
- Technical error reports, with message content and email addresses stripped out
- Location
- United States
- Transfers outside the EU
- Standard Contractual Clauses
PostcodeApi
Dutch address validation
- Data
- Postcode and house number
- Location
- Netherlands
- Transfers outside the EU
- None, processed within the EU
TransIP
Hosting of the application and database
- Data
- All personal data Heyloha stores
- Location
- Netherlands
- Transfers outside the EU
- None, processed within the EU
Estate agent and mortgage tools
These providers only receive data when your agent is set up to use the estate agent or mortgage tools.
Altum
Property data: valuations, energy labels, WOZ values, sale and rental history
- Data
- Addresses entered by visitors
- Location
- Netherlands
- Transfers outside the EU
- None, processed within the EU
WebBridge
Mortgage calculations
- Data
- Mortgage details entered by visitors: amount, income and term
- Location
- Netherlands
- Transfers outside the EU
- None, processed within the EU
Google Ireland Ltd.
Street View images and distance calculations
- Data
- Addresses or coordinates entered by visitors
- Location
- Ireland (EU), transfer to the United States
- Transfers outside the EU
- EU-US Data Privacy Framework and Standard Contractual Clauses
Changes to this list
When we add or replace a sub-processor, we email you at least 30 days in advance at the contact addresses in your Heyloha dashboard. If you have reasonable data protection grounds to object, we look for a solution together. If we can't agree within 30 days, you can cancel the affected part of your subscription and get a pro-rata refund of fees paid in advance.
Our own commitments are set out in our data processing agreement.
This website
heyloha.ai itself uses other services, such as analytics and ad measurement, and only with your consent. They are listed in our privacy policy.