Legal
Subprocessors
Last updated: October 21, 2026
CIPHRA SOFTWARE INC. (“Ciphra”, “we”, “us”), which operates ReceptionWorks, uses the subprocessors below to provide the service. A subprocessor is a company that processes personal data on our behalf, including data that businesses entrust to us under our Data Processing Addendum. The Privacy Policy explains what information we collect and why.
Subprocessors
| Provider | Purpose | Location | Personal data |
|---|---|---|---|
| Cloudflare | Hosting, networking, storage of files, logs and backups, and processing by AI models through Workers AI | United States and Cloudflare’s global network | All information in the service, such as accounts, business content, conversations and customer records |
| OVHcloud | Servers that host our database | Canada | All information in the service, such as accounts, business content, conversations and customer records |
| Ollama | Processing by AI models through Ollama Cloud: AI replies, summaries, customer memory and translations | United States | Messages, business content and customer records included in a request |
| OpenRouter | Processing by AI models when we route a request through it; it forwards each request to the model provider selected for it | United States and the country of the selected model provider | Messages, business content and customer records included in a request |
| Sign-in through Firebase Authentication, waitlist storage in Firestore and usage analytics through Google Analytics | United States; waitlist storage in Canada | Business users’ names, email addresses and sign-in details; waitlist email addresses; usage analytics without names, email addresses or conversation content | |
| Resend | Delivery of service emails | United States | Recipients’ email addresses and email content, which can include an AI summary of a conversation |
| Stripe | Payments and billing for paid plans | United States | Billing contact, plan, subscription status and invoices; card details are entered directly with Stripe |
AI model providers
AI replies, summaries and translations are produced by sending messages and the relevant business content to AI models. None of these providers uses this content to train AI models:
- Cloudflare Workers AI: Cloudflare states that it does not keep inputs or outputs after it has processed a request and does not use them to train AI models.
- Ollama Cloud: according to its published privacy policy, Ollama does not store prompts and responses beyond the time needed to fulfil a request and does not use them to train AI models.
- OpenRouter: we ask OpenRouter to route each request only to model providers that do not keep the content of the request and do not collect it for training.
Channels a business connects
When a business connects Instagram, Facebook Messenger, WhatsApp or Telegram, its messages pass through Meta or Telegram. These platforms are not our subprocessors: the business connects its own accounts on them, and they process messages under their own terms and privacy policies.
Changes to this list
We email the owner of each business at least 30 days before a new subprocessor starts processing personal data that businesses entrust to us, and we change the date above. A business can object as described in the Data Processing Addendum. If we must replace a subprocessor urgently to keep the service secure or running, we tell business owners as soon as possible after the change, and they can object in the same way.
Contact
CIPHRA SOFTWARE INC., British Columbia, Canada. Email: contact@ciphra.ca.