Lina · Legal
Subprocessors
Last updated: · Revision 1
Effective for an account from the moment it accepts this version at signup. For an account that accepted an earlier version, or none: effective , or 30 days after we email notice to that account’s admin if later (Terms of Service, section 18).
These are the third-party companies that process personal data for Lina. Each handles only what it needs for the job listed, under its own data-protection terms, and we remain responsible for them as our Data Processing Addendum describes. We use no analytics, advertising or tracking services from third parties; first-party interaction and disclosure logs stay with the hosting and backup providers listed below. How we use personal data is explained in our Privacy Policy.
| Subprocessor | What it does for Lina | Data it handles | Location |
|---|---|---|---|
| Railway | Hosts the Lina application and its Postgres database, and keeps application logs | All data in Lina: accounts, organization content, conversations, call records, contacts and logs | United States (US West region) |
| Google (Gemini API) | AI answers for the chat assistant and staff AI, web-search lookups (Google Search), live phone-call audio (Gemini Live), call summaries, and configured admin AI, website editing and draft-generation paths | Conversation, email, knowledge and website text sent to those features, web-search questions, live call audio and call transcripts | Google data centers (United States and other locations) |
| OpenAI | AI answers for the chat assistant and staff AI when we switch them from Gemini to OpenAI; the admin assistant, the AI Website Editor, and Command Center AI tools such as email drafts, email and conversation summaries, analysis and search; fallback post-call summaries when configured | Conversation and knowledge text sent for those answers, and text an organization's team sends to those tools, including emails, conversations, knowledge, website content and, for fallback summaries, call transcripts | United States |
| Twilio | Phone numbers, voice calls and the live call audio stream, the fixed AI and voicemail notices played to callers, voicemail recording (each held there until Lina deletes it, as the Privacy Policy describes), and text messages | Caller and recipient phone numbers, call audio in transit, voicemail recordings until Lina deletes them there, and text message content | United States |
| Resend | Sends email (sign-in and billing emails, alerts, call transcripts and summaries and chat escalations to an organization's staff, and email an organization sends) and receives email for organizations set up on its inbound route | Email addresses and email content, including call transcripts and summaries, chat escalation details and contact details | United States |
| Telegram | Optional instant alerts to Lina's operators (new signups, payments, disputes, deploys and service errors) and, for any alert an organization routes to Telegram, to that organization's staff | Alert text, which can include names, email addresses, phone numbers, ZIP codes, message or call-summary excerpts, email senders and subjects, and sign-in IP addresses | Global (Telegram data centers) |
| Stripe | Payments, subscriptions, invoices and the billing portal | Billing contact, billing address, card details (held by Stripe) and payment history | United States |
| Cloudflare | DNS for linasystems.org, routing mail sent to each organization's inbound address (Email Routing and an Email Worker), and our external uptime monitor | Inbound email content in transit; the uptime monitor sees service health only, never customer data | Global network |
| GitHub | Source code, automated tests, and storage for nightly backups (private workflow artifacts, deleted after 30 days) | Full platform backups, which include all customer data | United States |
Independent external information sources
U.S. Census Bureau (United States). An optional legislative-district lookup can send an address or ZIP-containing query, including any surrounding message text, to the Census Bureau’s public geocoder. The Census Bureau is an independent public information source, not a contracted subprocessor. Its own privacy terms apply.
When an organization instructs Lina to crawl an external site or retrieve a public social feed, that site or platform sees the requested URL or public account identifier and ordinary request information. These independent sources are not contracted subprocessors and are not authorized to receive unrelated stored customer records.
Changes to this list
We will add a new subprocessor to this page at least 14 days before it starts processing customer data, unless an urgent replacement is needed to keep Lina running (then we will update the page as soon as we can). The publication date and revision at the top identify each update. To object to a new subprocessor on reasonable data-protection grounds, email legal@linasystems.org within that period — section 7 of the DPA explains what happens next.