Subprocessors
The complete list of third parties that can process Sajama One customer data. If it is not on this page, it does not see your data.
Effective 22 October 2026 · Applies to sajamaone.com and the Sajama One app.
Current subprocessors
We use these providers to run the product. Each is bound by a data processing agreement with us, and each is limited to what the service needs.
Supabase
The region selected when the Supabase project was created. Ask us for the region on your workspace and we confirm it in writing.Purpose. Database, authentication and file storage
Data. Workspace records, agent and contact records, conversations and messages, uploaded attachments
Vercel
Global edge network; logs in the configured deployment regionPurpose. Application hosting and edge delivery
Data. Request metadata and short-lived application logs; message bodies are processed in memory, not persisted by the platform
Resend
United StatesPurpose. Transactional email (invitations, password resets, assignments)
Data. Recipient address, sender address, message subject and body
Lemon Squeezy
United StatesPurpose. Payments, subscription billing and tax as merchant of record
Data. Billing name, email, country and tax identifier. Card details go directly to Lemon Squeezy; they never reach our servers.
Channels you connect yourself
WhatsApp, Instagram and Messenger run on your Meta app credentials; Telegram, Slack and Discord run on apps you create or authorise. Messages transit those platforms under their terms and your agreement with them. We are not the processor for that transit - you are the controller of the connection and we act on your instruction.
Because of that, disconnecting a channel in Sajama One stops our access immediately, but it does not delete anything held by the platform itself.
What is not on this list
There is no generative AI provider. The instant answers in the product are matched against the questions and files you save in your own knowledge base, computed on our own servers. Your customers' messages are not sent to a third-party model provider, because there is not one.
There is no third-party analytics, session-recording, advertising or error-tracking script on the marketing site or inside the product.
Changes
We email workspace owners before adding a subprocessor that will process personal data, and we update this page at the same time. If a change is material and you object, you can end your subscription before it takes effect.
Questions?
If anything on this page is unclear, write to support@sajamaone.com. We answer within two days.