This page lists the third-party service providers (“subprocessors”) that Poppy Marketing & Consulting LLC (“Poppy”) uses to operate the Front Desk by Poppy service (“Service”). Each subprocessor is bound by a written contract requiring it to protect your information consistent with our Privacy Policy and Data Processing Addendum.
Poppy will provide at least thirty (30) days’ written notice (by email and by updating this page) before adding or replacing a subprocessor that processes Customer or caller information.
| Subprocessor | Function | Location | Data processed |
|---|---|---|---|
| Twilio Inc. | Voice telephony, call recording storage, SMS delivery, A2P 10DLC brand and campaign registration, phone number provisioning | United States | Caller phone numbers, call audio recordings, call metadata, SMS message content, SMS recipient phone numbers |
| Anthropic PBC | AI inference (Claude) for the Front Desk AI voice agent | United States | Call transcripts during real-time processing |
| Supabase Inc. | Database hosting and storage for dashboard data and operational call metadata | United States | Application data including call metadata, transcripts, and customer configuration data (encrypted at rest) |
| Stripe, Inc. | Subscription payment processing and billing | United States | Customer billing details (Stripe stores payment instruments; Poppy does not store full card numbers) |
| Vercel Inc. | Web hosting for the Front Desk marketing site, intake form, and customer dashboard | United States | Standard web logs (IP address, browser, pages viewed); customer dashboard activity |
| Railway | Application hosting for the Front Desk voice-agent backend | United States | Call data processed in transit during voice-agent operation |
| Resend, Inc. | Transactional outbound email delivery (account notifications, lead alerts, welcome emails, retainable acknowledgment receipts) | United States | Customer email addresses, email content, attachment file metadata |
| Airtable, Inc. | Intake-form data storage, operational customer records, acceptance audit trail | United States | Customer business information, intake-form responses, acceptance records (version, timestamp, URLs presented, IP address, user agent) |
| Google LLC (Google Workspace) | Inbound email handling (support, cancellations, account correspondence), shared Drive, legal-archive operations | United States | Customer support and cancellation email content; legal-document archive metadata |
| Cal.com | Pro-tier kickoff scheduling (Pro customers only) | United States | Pro customer name, email, scheduled meeting metadata |
Each subprocessor’s role is limited to delivering the function described above. Poppy does not authorize subprocessors to use Customer or caller information for their own purposes outside the scope of the services they provide to Poppy.
Poppy notifies Customers of subprocessor changes by email (sent to the address on file) and by updating this page. To ensure you receive notices, keep your account email current.
If you do not have a Front Desk account but want to monitor subprocessor changes (for example, you are evaluating the Service), email privacy@poppymarketingandconsulting.com to request notification.
If a proposed subprocessor change is unacceptable to you, email privacy@poppymarketingandconsulting.com within the thirty (30) day notice window with a reasonable basis for the objection. Poppy will work in good faith to resolve the objection. If Poppy cannot accommodate it, you may terminate the affected portion of the Service without penalty under Section 4.4 of the Data Processing Addendum.
| Date | Change | Notes |
|---|---|---|
| 2026-05-12 | Initial publication | Subprocessors listed as of launch |
This table is updated each time a subprocessor is added, replaced, or removed.
Poppy Marketing & Consulting LLC 23015 FM 529 Rd, Ste 200 PMB1125 Katy, TX 77493
privacy@poppymarketingandconsulting.com