01 · Overview
How we engage Sub-Processors
This page explains how Phave engages with Sub-Processors.
To help Phave deliver the Subscription Service, we engage Sub-Processors for hosting, AI processing, and email delivery. These Sub-Processors may have access to Customer Data.
A customer may connect its own AI provider keys in Phave (Settings → Maestro → AI providers). When it does, that provider processes Customer Data under the customer's own agreement with it, not as a Phave Sub-Processor. The same applies to other vendors a customer connects under its own agreements, such as its CRM or its own email provider.
02 · Current Sub-Processors
Current Sub-Processors
6 providers- 01United States
Google LLC (Google Cloud Platform)
Hosting & infrastructure
Database (AlloyDB), object storage, logging, and edge delivery for the Subscription Service, hosted in the us-central1 region.
- 02United States
Google LLC (Gemini API, paid tier)
AI embeddings
Creates embeddings for Maestro features: knowledge documents, chat attachments, and queries. Provided under the Gemini API terms, separately from Google Cloud Platform.
- 03United States
Anthropic, PBC (Claude API)
AI inference
Runs Maestro's AI features and answers in-product help questions, under Anthropic's commercial terms.
- 04United States
OpenAI OpCo, LLC (OpenAI API)
AI inference
Runs Maestro's AI features for subscriptions set up to use OpenAI, and creates embeddings of Phave's own product documentation.
- 05United States
Twilio, Inc. (including SendGrid, Inc.)
Email delivery
Sends marketing email for subscriptions whose sending runs through a SendGrid account Phave manages, and transactional email to Phave users: sign-in, invitations, and notifications.
- 06United States
Automattic Inc. (Gravatar)
Profile photos — only when enabled
When a subscription switches Gravatar on, Phave sends a hash of a person's email address to look up their public profile photo. Off by default.
03 · Changes
This list evolves
Our business needs and service providers may change from time to time. For example, we may stop using a service provider to consolidate and minimize our use of service providers. Similarly, we may add a service provider if we believe that doing so will enhance our ability to deliver our Subscription Service.
Before a new Sub-Processor begins processing Customer Data, we will update this page and give customers written notice at least 30 days in advance.
A customer may object to a new Sub-Processor in writing to privacy@phave.com. The objection period, the grounds for objecting, and what happens if an objection cannot be resolved are set out in the Sub-Processing section of our Data Processing Agreement.