Subprocessors
Subprocessors.
Version 2026-10-24 · Effective October 24, 2026
These are the companies that EVKII, Inc. has selected and engaged to help run EMLbot, what each one does, and what data it handles. Each handles data only to provide its service to us, under a written contract. How we handle personal information overall is described in our Privacy Policy, and our commitments about customer data are in our Data Processing Addendum.
Our subprocessors
| Name | Purpose | Data handled | Location |
|---|---|---|---|
| Cloudflare, Inc. | Hosting on Cloudflare Workers. Database (D1). Object storage for raw messages and attachments (R2). Background jobs (Queues). Inbound email routing for our domains. Email sending. DNS lookups when verifying customer domains. | Account data, workspace content including email messages and attachments, bot identity data, security and operational logs, and domain names being verified. | United States, and Cloudflare's global edge network |
| Amazon Web Services, Inc. | Sending outbound email (Amazon SES). | Outbound messages, including sender and recipient addresses, headers, content and attachments. | United States |
| Google LLC | Sign-in for people using the EMLbot console (Google sign-in). Workspace email for EVKII's own mail. | Name, email address and profile picture of people who sign in. Email that you send to EVKII's own addresses, such as support@ and legal@. | United States |
| Telnyx LLC | Phone numbers, SMS and MMS messaging, for workspaces that turn on Phone. | Phone numbers, message text and media (photos, video, audio), delivery receipts and opt-out status. | United States |
| Stripe, Inc. | Payments and billing for EMLbot plans, including the customer portal for cancellation. | Billing contact details, plan and invoice records, and payment card details (handled by Stripe; EMLbot does not store card numbers). | United States |
| X.AI LLC | Voice for bots. Early access. Not generally available, and not for sale. It handles data only if a customer separately turns voice on. | Call audio, transcripts and the phone numbers on the call. | United States |
Where our data is hosted
EMLbot is hosted in the United States. Cloudflare's edge network may carry traffic through other countries, but your data is stored in the United States.
Services you connect yourself are not on this list
This list covers the providers that EVKII selects and engages to deliver EMLbot. It does not cover services that a customer independently chooses and connects, such as the AI platform that runs a bot (for example Claude, ChatGPT or Grok), a webhook destination, or the customer's own systems. Those are governed by the customer's agreements with those providers. When a customer's bot sends content to one of them, that provider's terms and privacy practices apply.
Profile pictures
Profile pictures in EMLbot are shown from image addresses hosted by Google or GitHub. These are the only hosts we allow for profile pictures. When your browser shows one, it loads the image directly from that host, which can see the request your browser makes. We do not send workspace content to these hosts.
How we tell you about changes
When we add or replace a subprocessor, we will update this page and change the version date. We will also email workspace owners at least 30 days before the new subprocessor starts handling customer personal data.
If you have a reasonable data protection objection to a new subprocessor, write to legal@emlbot.com during that notice period. We will work with you to address it. If we cannot, you may close your workspace and we will refund any prepaid fees for the period after closure.
Questions
Questions about our subprocessors: support@emlbot.com. Legal notices: legal@emlbot.com.