Service providers and subprocessors
LEVER CONSULTANCY LTD, trading as hi boss · Version 2026-09-15.1 · 15 September 2026
Current service chain
OpenAI provides AI speech, transcription, responses, document indexing and retrieval, and the Sites hosting and ChatGPT sign-in services. Recall.ai connects the visible meeting bot and transports meeting audio and transcription. Cloudflare supplies the underlying Sites compute, database and object storage. These services can process account information, meeting content, authorised Context or technical records as needed for their stated functions. Google provides the Calendar and Drive services you authorise and also operates under its own terms. The applicable contracting entities and onward processing depend on the actual services and accounts; contact us for the current available contractual information.
Payments and Stripe
Stripe Managed Payments handles paid subscription checkout and acts as merchant of record for the transaction under the terms shown at checkout. Stripe receives account email, billing and payment details, selected plan and subscription identifiers. hi boss receives customer and subscription identifiers, payment status and related billing information, but does not store full card details. Stripe also processes data for its own payment, fraud, tax and legal responsibilities. It is not solely a subprocessor acting on hi boss instructions. The seller and applicable payment terms are identified at checkout. See Stripe privacy information.
Data locations and contracts
Recall is configured to use its Frankfurt API region. This does not establish UK-only or EU-only processing for the whole service. OpenAI and hosting processing may involve other locations. We do not claim that every provider contract, transfer mechanism or backup period has been independently audited. Request current available provider and transfer information from lever.daniel@gmail.com. New integrations will be added here before activation with customer data.
Provider information
OpenAI data controls OpenAI data-processing addendum Recall.ai privacy policy Recall recording retention Cloudflare privacy policy Google privacy policy Stripe privacy policy Our DPA sets out subprocessor change-notification and objection rights. A provider can have different data-protection roles for different services. These links explain provider practices and are not hi boss certifications.