The companies behind the system.

How this list works

Last updated: date

A subprocessor is a company we use that may handle your customers' data while we run your system for you. Each part of the system gets only the data it needs. For each one we show:

• Purpose: what it does for you.
• Data: what it may see.
• Location: where the company is and where it keeps data.
• Transfer basis: how data sent outside Turkey is covered under KVKK and GDPR.

None of them may use your data for their own purposes, including training AI models.

Accounts you hold and pay for yourself, such as your own Meta ad account or your own calendar, run under your own terms with that company and are not on this list.

Messaging

Meta (WhatsApp, Instagram, Messenger)

• Purpose: carries messages between your customers and your business accounts.
• Data: messages, voice notes, photos and files, names, phone numbers and profile names.
• Location: Meta company and data centre region for the WhatsApp Business Platform
• Transfer basis: basis Lawyer to check Your accounts stay in your name, so Meta may be your own provider under your own terms with Meta, not ours.

Zernio (channel connection)

• Purpose: connects your WhatsApp, Instagram and Messenger accounts to our system, so messages come in and replies go out.
• Data: the same as Meta: messages, files, names and numbers.
• Location: company country and server region
• Transfer basis: basis Lawyer to check

Automation and storage

n8n (automation)

• Purpose: runs the steps of your system: reads each message, asks the AI model, sends the reply, alerts your team, books the appointment.
• Data: everything that passes through: messages, contact details, booking data and, for clinics, photos and health details.
• Location: today n8n Cloud, region. Planned: our own server with hosting company and country.
• Run history: kept for number days, then deleted.
• Transfer basis: basis Lawyer to check

Supabase (database and file storage)

• Purpose: stores your approved answers, conversations, bookings and settings.
• Files: also stores the photos and files patients send, in private storage only your team can open.
• Data: all the types listed in our DPA, including photos and health data for clinics.
• Location: company country · servers in region chosen for our project
• Transfer basis: basis Lawyer to check

AI models

Google Gemini

• Purpose: reads incoming messages and writes replies from your approved answers, in the customer's language.
• Data: the message, the conversation so far and the approved answers that fit. whether photos and voice notes are sent Owner to confirm
• Plan: a paid plan, under which Google does not use the data to improve its models.
• Location: Google, company and processing region
• Transfer basis: basis Lawyer to check

Anthropic Claude (option)

• Purpose: a second AI model we may use instead of, or next to, Gemini, for example to compare answer quality. We tell you before we switch it on.
• Data: the same as Gemini.
• Location: company in the United States · processing region
• Transfer basis: basis Lawyer to check

Booking and alerts

Cal.com (booking)

• Purpose: keeps your calendar of free times and the bookings the assistant makes.
• Data: name, contact details, appointment time, the service asked about and time zone.
• Location: company country and server region
• Transfer basis: basis Lawyer to check If you use your own Cal.com account, Cal.com is your provider, not ours. Owner to confirm one WildZero account or one per client.

Telegram (team alerts)

• Purpose: sends alerts to your team's private group: questions the assistant can't answer, requests for a person, and replies waiting for approval.
• Data: the customer's name or number, their question and the suggested reply.
• Photos and health details are not sent in alerts. Your team opens them through a private link.
• Location: company country and server region
• Transfer basis: basis Lawyer to check

Email and website

Google Workspace (email)

• Purpose: our company email, for messages between you and us, and reports if you get them by email.
• Data: your team's names and email addresses, and whatever you send us by email. Please don't email us patient details.
• Location: Google, company and data region
• Transfer basis: basis Lawyer to check

Cloudflare (website hosting)

• Purpose: hosts our website and protects it from attacks.
• If we build and host a website for you, it runs here too.
• Data: IP addresses, browser details and request logs of visitors, and whatever a website form sends.
• Location: company in the United States. Pages are served from the data centre nearest the visitor. Logs kept in region.
• Transfer basis: basis Lawyer to check

Planned, not in use yet

These are added only when the matching service starts. We update this list and tell you first.

Retell AI (phone assistant) Planned

• Purpose: answers the calls you forward to it, for example missed or after-hours calls, in the caller's language, and writes a short note for your team.
• Data: call audio and recordings, transcripts, the caller's number, name and reason for calling. A caller may mention health details.
• Callers hear at the start that an AI assistant answers and that the call is recorded.
• Location: company country and server region · voice provider used through Retell: name
• Transfer basis: basis Lawyer to check

Turkish phone line provider Planned

• Purpose: gives the +90 number your calls are forwarded to, and connects it to the phone assistant.
• Data: caller numbers, call times and the call audio as it passes through.
• Location: Turkey · provider name
• Transfer basis: stays in Turkey, so no transfer abroad for this step. Lawyer to check

iyzico or PayTR (payments) Planned

• Purpose: takes deposits and payments through the payment links we send for you.
• Data: name, email or phone, the amount and what it is for. Card details go straight to the payment company. We never see them.
• Location: Turkey · which provider
• Transfer basis: basis Lawyer to check

Changes to this list

We email every client at least number days before we add or replace a subprocessor. If you object for a good data protection reason, we look for another way, or you can end the affected service without a fee. Lawyer to check

The rules for subprocessors are in our DPA. Questions: email.