Loading Sawoice
Provider register
Who processes data for Sawoice.
Who may process Sawoice account, optional cloud, billing, email, and infrastructure data. Cloud AI providers are linked to their Privacy Policies and Terms. Polar is payment Merchant of Record only-not an AI or voice processor.
- Version
- 2026-08-10.3
- Effective
- 2026-07-31
- Reviewed
- 2026-08-10
Current register
“Manual confirmation required” is a launch gate, not a claim that the provider currently receives production data.
| Provider | Role and data | Location / safeguard | Status |
|---|---|---|---|
| Polar Software, Inc.PrivacyTerms | Merchant of Record and payment checkout only (not an AI/voice processor). Checkout, tax, invoices, disputes, and buyer portal.Verified email; External user ID; Trusted tax/location IP; Checkout ID; Plan slug | Polar-controlled payment infrastructurePolar Buyer Terms, Privacy Policy, and DPA apply to checkout/payment; confirm production account before live billing | Manual confirmation required |
| Stripe and Polar payment partnersPrivacy | Payment processing used by Polar as Merchant of RecordPayment and billing data collected by Polar/payment partner | Provider-controlledManaged by Polar subject to signed terms; confirm before live billing | Manual confirmation required |
| ResendPrivacy | Transactional email when configuredRecipient email; Transactional message; Delivery metadata | Provider-controlled; confirm production region before launchResend Privacy Policy; DPA/region confirmation before production email | Configuration-dependent |
| Together Computer, Inc. (Together AI)PrivacyTerms | Batch and realtime speech-to-text inferenceRequested audio; Language/dictionary options; Generated transcript | Provider-controlled; see the provider Privacy Policy and TermsUser-requested optional cloud processing under the linked provider policies; Sawoice does not claim identical retention across providers | Configuration-dependent |
| Eleven Labs, Inc. and applicable affiliatesPrivacyTerms | Batch and realtime speech-to-text inferenceRequested audio/realtime frames; Language options; Generated transcript | Provider-controlled; see the provider Privacy Policy and TermsUser-requested optional cloud processing under the linked provider policies; Sawoice does not claim identical retention across providers | Configuration-dependent |
| OpenAI, L.L.C. and applicable affiliatesPrivacyTerms | Completed-recording speech-to-text inferenceRequested audio; Language/keyword/prompt options; Generated transcript | Provider-controlled; see the provider Privacy Policy and TermsUser-requested optional cloud processing under the linked provider policies; Sawoice does not claim identical retention across providers | Configuration-dependent |
| X.AI LLC (xAI)PrivacyTerms | Text-to-speech inferenceRequested text; Voice/output options; Generated audio | Provider-controlled; see the provider Privacy Policy and TermsUser-requested optional cloud processing under the linked provider policies; Sawoice does not claim identical retention across providers | Configuration-dependent |
| Vercel Inc.PrivacyTerms | Static hosting and CDN delivery for the public marketing landing site at sawoice.com and www.sawoice.com only; no authentication, account, admin, checkout, API, or database runtimePublic landing-page requests and standard HTTP delivery metadata; Static landing assets and the versioned public product-catalog snapshot | Vercel-controlled infrastructure; production project, regions, request-log settings, account state, and live DNS placement are manual unverified gatesVercel Terms, Privacy Notice, and DPA eligibility apply as appropriate. Confirm the production account, DPA, regions, log controls, and transfer terms before launch; local code does not prove those facts | Manual confirmation required |
| Hostinger International, Ltd. (Hostinger KVM 2)PrivacyTerms | Selected single-host VPS for the operations Next.js app at app.sawoice.com, dual API workers, localhost PostgreSQL, and localhost Redis admission serviceOperations-app requests and authenticated account operations; Account/service records in PostgreSQL; Content-free API runtime and usage metadata; Redis admission metadata only (HMAC-derived scopes, session classification, provider, lease expiry) | Hostinger KVM 2 plan target (2 vCPU / 8 GB RAM / 100 GB disk); region and live data placement are manual unverified gates-not claimed from documentation aloneHostinger DPA/terms and region residency confirmation remain manual launch gates. Production operations app, API, PostgreSQL, Redis, and firewall posture are not claimed live-configured. Do not claim a signed DPA, confirmed region, or production deployment until verified in that environment | Manual confirmation required |
| Cloudflare, Inc. (R2)PrivacyTerms | Selected private object storage and direct delivery for immutable signed Sawoice desktop installers and updater artifactsSigned desktop installers and updater bundles; Content-free release metadata and immutable object keys; Standard HTTP delivery metadata, including requester IP, when a short-lived presigned download URL is used | Cloudflare-controlled R2 infrastructure; a private beta release bucket and separate bucket-scoped CI/backend credentials are operator-configured. GitHub-hosted credential/API and private-delivery verification is recorded in the canonical compliance register; jurisdiction/location, request-log controls, DPA/account state, backend credential operation, and customer delivery remain manual gatesCloudflare terms, privacy notice, DPA, transfer terms, and selected R2 jurisdiction apply as appropriate. CI verification does not prove DPA execution, residency, backend delivery, customer traffic, or production deployment | Manual confirmation required |
| Object storage provider (encrypted PostgreSQL backups) | Selected-category encrypted database backup target (vendor not selected)Client-side encrypted database backup objects only | Vendor and region not selected; production bucket, lifecycle, restore test, and DPA/account state not verified30-day object lifecycle target with incomplete-multipart abort and deletion protection when a provider is configured. Object-storage vendor selection, credentials, restore test, and DPA/account state remain manual unverified launch gates-documentation alone is not confirmation | Manual confirmation required |
| Security-log sink (India-resident, if required) | Content-free ICT/security event storage for CERT-In readinessStable content-free security event fields only | India-resident sink only if counsel confirms CERT-In applicability; vendor not selectedUnresolved manual launch gate. Do not declare the production security-log gate complete until applicability, vendor, 180-day lifecycle, and access control are recorded | Manual confirmation required |
1. Controller, processor, and Merchant of Record roles
SAWANT CORE LLP controls the Sawoice account, product, support, and API operations described in the Privacy Policy. Optional cloud AI companies process content only for a user-requested provider operation under that provider's published Privacy Policy and Terms.
Polar Software, Inc. is used solely as the buyer-facing Merchant of Record for checkout and payment (tax, invoices, disputes, buyer portal). Polar does not provide Sawoice AI or voice processing. SAWANT CORE LLP remains the Sawoice product licensor and operator.
2. Data minimization
Cloud providers receive only the content and options necessary for the selected request. Polar receives customer data only when checkout begins. Sawoice does not create a Polar customer for free signups and does not send an account name unless a later verified requirement is documented.
3. Provider changes
A new provider, model, billing partner, hosting vendor, email vendor, or security-log vendor requires a registry review and version bump before deployment. Sawoice does not claim zero-retention or identical provider terms unless separately confirmed and version-bumped. Where law or contract requires notice, users receive it before the change takes effect.