Sub-processors
Last updated · 2026-09-11
Noli LLC(“Noli,” “we,” or “us”) uses the third-party vendors listed on this page to run the Noli AI products and The Launch Pad, a program of Noli LLC. Each one processes customer data only on our behalf, only for the purpose shown, and under a written contract with confidentiality and data protection obligations at least as protective as those in our Data Processing Addendum. This page is incorporated into that DPA and into our Privacy Policy by reference.
“Customer data” here means the information you and your team put into the Service, the information about your customers, prospects, and callers that the Service handles for you, and your account details. Where a vendor only receives data when you use a particular product, the purpose column says which product.
1. Infrastructure, identity, billing, and analytics
| Vendor | Purpose | Data | Location |
|---|---|---|---|
| Vercel, Inc. | Hosting and serverless compute for noliai.com, the Noli dashboard, Knowledge Base, Project Manager, Noli Marketing, and The Launch Pad sites, including scheduled jobs. | All data that passes through those apps in transit, request logs, IP addresses. | United States (global edge network) |
| Supabase, Inc. | Managed Postgres databases and file storage for the Noli account and entitlement records, Knowledge Base, Project Manager, Noli Marketing, and The Launch Pad. | Account records, workspace content, documents, uploaded files, encrypted connected credentials, AI usage records. | United States |
| Hetzner Online GmbH | Dedicated servers that run Noli CRM, the GTM Engineer, and each customer’s Chief of Staff container. | CRM records, prospect data, calls and texts handled by the CRM, connected mailbox and calendar data, Chief of Staff conversations and connected credentials. | Germany |
| Railway Corp. | Hosts the Noli Marketing background workers and its agent gateway. | Marketing drafts, campaigns, leads, knowledge documents, and property records while a job runs. | United States |
| Clerk, Inc. | Sign-in, sessions, and team management for every Noli app and The Launch Pad. | Name, email address, password hash or third-party identity, organization membership, IP address, device details. | United States |
| Stripe, Inc. | Payment processing, subscriptions, invoices, and the billing portal. | Name, email, billing address, payment card details (entered on Stripe’s pages), subscription and usage records. | United States |
| Cloudflare, Inc. | Bot protection on sign-up (through Clerk) and on lead forms of landing pages published through Noli Marketing. | IP address, browser details, challenge result. | United States (global network) |
| PostHog, Inc. | Product analytics, error tracking, and consent-gated session replay so we can find and fix problems. | Account id, pages and features used, clicks, errors, IP address, device details. Form inputs are masked in replays. | United States |
2. AI model providers
We use paid API tiers of these providers whose published terms state that the provider does not use data submitted through the API to train its models. If you bring your own API key, your prompts go to that provider under your own account and its terms, and it is not a Noli sub-processor for that traffic.
| Vendor | Purpose | Data | Location |
|---|---|---|---|
| Google LLC (Gemini API) | Primary language model for the Chief of Staff, CRM, Noli Marketing, GTM Engineer, Project Manager, the free analyses on noliai.com, and video generation in Noli Marketing. | Prompts and the workspace content needed to answer them, including customer and prospect records, emails, documents, transcripts, and marketing content. | United States |
| OpenAI, L.L.C. | Language models, embeddings, document search, speech-to-text, text-to-speech, and real-time voice for the Knowledge Base, Project Manager, CRM assistant, and Noli Marketing. | Prompts and workspace content; documents indexed for search; audio of voice sessions and voice memos. | United States |
| Anthropic, PBC | Language models for drafting, review, and agent tasks in the Knowledge Base, Project Manager, Noli Marketing, the CRM landing-page builder, and the Chief of Staff. | Prompts and the workspace content needed to answer them. | United States |
| xAI Corp. | Alternate language model in Project Manager, the Noli dashboard, and Noli Marketing; public post search for the GTM Engineer. | Prompts and the workspace content needed to answer them; GTM search queries. | United States |
3. Email, telephony, and publishing
| Vendor | Purpose | Data | Location |
|---|---|---|---|
| Resend, Inc. | Sends Noli’s transactional email (welcome, notifications, digests, lead-magnet delivery, newsletter sequences) and receives inbound email sent to Noli-provided addresses. | Recipient email addresses, message subjects and bodies, attachments, delivery events. | United States |
| Loops (Loops, Inc.) | Account lifecycle email from Noli, such as onboarding and usage notices. | Email address, name, sign-up source, plan and usage properties. | United States |
| Twilio Inc. | Phone numbers, calls, text messages, and carrier registration (A2P 10DLC) for the Receptionist. | Caller and recipient phone numbers, text message contents, call metadata, recordings where enabled, business details submitted for carrier registration. | United States |
| Retell AI, Inc. | Voice agent that answers and places calls for the Receptionist. | Live call audio, transcripts, caller phone numbers, the business’s call script and knowledge. | United States |
| Zernio | Publishing approved posts to social accounts a customer connects through Noli Marketing or the Chief of Staff. | Connected social account tokens, post text and media, engagement data. | United States |
4. Data and research services
These vendors process data only when you use the product named in the purpose column. Prospect data sourced through them is handled as described in Section 2.8 of the Privacy Policy, including the retention deadlines and the removal form.
| Vendor | Purpose | Data | Location |
|---|---|---|---|
| Apify Technologies s.r.o. | Runs public-web collection tasks for the GTM Engineer (public professional profiles, company pages, public posts, events, email discovery) and competitor ad research for Noli Marketing. | Search terms, target company names and URLs, and the public prospect information returned. | Czech Republic (EU) and United States |
| DataForSEO | Search-engine, maps, and events results for GTM prospecting and keyword research in Noli Marketing. | Search terms, target locations, and the public business listings returned. | United States and European Union |
| LeadMagic | Finds business email addresses for prospects the GTM Engineer identifies. | Prospect name, employer, and company domain; returned work email. | United States |
| Bouncer (Bouncer Sp. z o.o.) | Checks that a prospect email address is deliverable before a customer sends outreach. | Prospect email addresses. | Poland (EU) |
| SociaVault | Public social-media content research in Noli Marketing. | Search terms and public posts returned. | United States |
| Tavily, Inc. | Web search for the Knowledge Base assistant. | Search queries, which may include workspace context. | United States |
| Supadata | Fetches transcripts of YouTube videos a customer imports into the Knowledge Base. | Video URLs. | European Union |
| RentCast | Property records, valuations, and comparable sales for the real estate tools. | Property addresses submitted for analysis. | United States |
| Google LLC (Places API and Fonts) | Neighborhood autocomplete on the real estate territory checker; typeface delivery on noliai.com, app.noliai.com, and CRM landing pages. | Partial search text typed into the checker; IP address and browser details for font requests. | United States |
5. Services you connect yourself
The Service can connect to accounts you already have so your AI team can work inside them. When you connect one, that provider processes your data under its own terms and privacy policy, on your authorization, and it is not a Noli sub-processor. Noli receives only the access you grant and uses it as described in the Privacy Policy. Connections currently offered include: Google (Calendar, Drive, Search Console, Business Profile), Microsoft 365 and Outlook, any mailbox that supports IMAP and SMTP, Dropbox, Notion, Slack, Telegram, Discord, Meta Threads, X, Reddit, LinkedIn and the other networks available through Zernio, QuickBooks, Xero, Calendly, DocuSign, Follow Up Boss, WordPress, Ghost, Webflow, Eventbrite, PredictHQ, your own Twilio account, your own Stripe account (for payments you collect through the CRM), your own email service (Resend, SendGrid, Mailgun, or Amazon SES), your own AgentMail inbox, and, on your own key, HeyGen, fal.ai, Firecrawl, Brave Search, Apify, ElevenLabs, and a model provider of your choice.
6. How we announce changes
We update this page whenever a sub-processor is added, replaced, or removed, and we change the date at the top. Before a new sub-processor starts processing your data, we email the owner of your account at least thirty (30) days in advance, naming the vendor, its purpose, and its location. If you have a reasonable data-protection objection, email privacy@noliai.com within those thirty days. We will try to offer an alternative; if we cannot, you may cancel the affected subscription before the change takes effect and we will refund any prepaid fees for the period after cancellation. Cancelling is the remedy for an objection; a change you do not object to within the period is accepted. Where a change is needed urgently to keep the Service secure or available, we will give as much notice as we can and explain why.
To be added to the change-notice list for an account you do not own, or to ask about any vendor on this page, email privacy@noliai.com.
7. Contact
Privacy and sub-processor questions: privacy@noliai.com. Contract questions: legal@noliai.com. Security: security@noliai.com.
© 2026 Noli LLC. All rights reserved. Noli AI is a product offered by Noli LLC.