SubprocessorPurposeDataLocationSince
Amazon RDS PostgresPrimary Postgres database for the productAll product data: account, booking, billing and support recordsUnited States20 Aug 2026
Amazon Web Services (S3)File and media storageUploaded images and media; depending on configuration, call recordings and transcriptsUnited States20 Aug 2026
CloudflareFile and media storage (R2); alternative email transport (configuration-dependent, only one email provider active at a time)Uploaded images and media; call recordings and transcripts (configuration-dependent); when used for email: sender/recipient names and addresses, subject and body, calendar invite detailsUnited States20 Aug 2026
VercelHosting and CDN for the app and website; website analyticsIP addresses, request metadata, and any personal data contained in requests/responses in transitUnited States20 Aug 2026
Metabase CloudInternal business intelligence and analyticsProduction account and booking records made available through connected data sourcesUnited States20 Aug 2026
SendGrid (Twilio)Transactional email delivery: confirmations, reminders, invites (active provider for cal.com)Recipient and sender addresses and names, subject and body, calendar invite (title, times, description, attendee list)United States20 Aug 2026
TwilioSMS and WhatsApp reminders, phone verification, phone number lookupPhone numbers, message contents, verification codesUnited States20 Aug 2026
IntercomSupport chat and support ticketsName, email, account ID, plan, signup date, org and usage counts, contents of support conversationsUnited States20 Aug 2026
Daily.coCal Video: video calls, recordings, transcriptsMeeting and participant data, audio and video of recorded calls, transcriptsUnited States20 Aug 2026
SlackInternal and external communicationMessages, files and attachments, channel and workspace metadata, user profile information (name, email address, avatar)United States20 Aug 2026
StripeSubscriptions, checkout, invoices, and customer-collected booking paymentsEmail, billing name and address, card details entered on Stripe's own checkout (PCI-DSS certified; card numbers never reach Cal.com servers), subscription metadataUnited States20 Aug 2026
OpenAIAI meeting notes: summarizing Cal Video transcripts (opt-in AI feature)Transcript text (may include names and meeting content); no meeting titles, dates, attendee records, or links. No model training on customer data.United States20 Aug 2026
AnthropicIn-product AI assistants (e.g. building routing forms); opt-in AI featureUser prompts typed to the assistant and the form or account context needed to answer. No model training on customer data.United States20 Aug 2026
Retell AICal.ai phone agents that place or take calls (opt-in AI feature)Phone numbers; guest name, email and company where configured; call audio and conversation content. No model training on customer data.United States20 Aug 2026
PostHogProduct analyticsIP and request metadata; events keyed to an opaque ID (no raw database IDs, emails, slugs, names or booking answers); GeoIP disabled, proxy strips forwarded IPs; outside allowlisted regions events attributed to organization, not personUnited States20 Aug 2026
Google Analytics / Google Tag ManagerMarketing-site traffic measurement (cal.com website only, not the app; outside the EU)IP address, browser and device data, pages viewedUnited States20 Aug 2026
DubWebsite and signup attribution (marketing site only, not the app)IP address, browser and device data, referral and page dataUnited States20 Aug 2026
X (Twitter) AdsAd measurement (marketing site only, not the app)IP address, browser data, and pixel conversion eventsUnited States20 Aug 2026
WhopWhop Payments is a global payment-processing platform that powers Cal Pay, which is a core part of Cal.com's payments offering.Name, email, payment methodsUnited States21 Aug 2026