Effective 2026-09-15 · replaces version 2026-04-24-draft · published at /legal/subprocessors · incorporated in the DPA
This page lists the categories of third-party service providers ("subprocessors") that Desk Plus LLC d/b/a WYN Studio engages to deliver the WYN Agent Portal, with the purpose, the data each processes and where it is hosted. Customers pre-authorize the subprocessors listed here under the Data Processing Addendum. The legal names of subprocessors are available to customers on request under confidentiality at privacy@wynstudio.io. We post additions here with a dated entry at least 15 days before a new subprocessor processes customer data. Subscribe to change notices by emailing hello@wynstudio.io with the subject "Subscribe to Subprocessor Notices".
Infrastructure and hosting
| Category | Purpose | Data processed | Hosting |
|---|---|---|---|
| Database, authentication and realtime platform | Primary data storage, user sign-in, live updates | All customer data; credentials (hashed); sensitive fields encrypted | United States (AWS us-east-1) |
| Web application hosting and edge network | Serves the web application | Request metadata; transient IP addresses | United States primary; global edge |
| Backend application hosting | Runs the application programming interface and background jobs | Request metadata; application logs | United States (Google Cloud, us-central1) |
| File storage | Stores uploaded documents, files and exports | Customer uploaded files | United States (Google Cloud, us-central1) |
| Key management service | Wraps the encryption keys that protect sensitive fields | Encrypted key material only; no customer data | United States (Google Cloud, us-central1) |
| Secrets management | Stores application credentials and connected-service keys | Encrypted credentials only | United States (Google Cloud) |
AI and voice
| Category | Purpose | Data processed | Hosting |
|---|---|---|---|
| Large language model provider (primary) | Text assistants, drafting, summaries, document extraction | Text, documents and context submitted to AI features; contractually excluded from model training | United States |
| Large language model provider (fallback) | Same purposes when the primary provider is unavailable or the customer selects it | Same; contractually excluded from model training | United States |
| Conversational AI platform | Conversational logic for Luna voice calls, the voice widget and the Sentinel staff chat assistant | Call audio, live transcripts, caller phone number, staff chat messages, and the carrier, product and client context the agency provides | United States |
| AI voice: speech recognition | Converts call audio to text for live calls, call intelligence and voicemail | Call audio, transcripts | United States |
| AI voice: voice synthesis | Generates the synthetic voice on AI calls | Response text, generated audio | United States |
Luna is a WYN Studio product. The categories above are the vendors Luna relies on; they may change as Luna's own capabilities expand, and changes are posted here.
Communications
| Category | Purpose | Data processed | Hosting |
|---|---|---|---|
| Telephony and messaging carrier platform | Voice calls, text messages, phone numbers, call recording, messaging registration | Phone numbers, message content, call metadata, recordings where enabled | United States |
| Transactional email service | Sends platform email such as notifications and, where the agency uses the platform sender, agency email | Recipient address, subject, body, delivery events | United States and European Union |
Payments, monitoring and security
| Category | Purpose | Data processed | Hosting |
|---|---|---|---|
| Payment processor | Subscription billing, wallet top-ups, payment method storage | Cardholder name, card brand and last four digits, billing address, transaction records; full card numbers never reach WYN Studio | United States |
| Error and performance monitoring | Detects application errors | Stack traces and technical diagnostics with screen replay on error with masking; personal data filtered before sending | United States |
| Bot detection on public forms | Protects signup and contact forms from automated abuse | Browser signals; no form content | Global |
| Scheduling widget on the website | Demo booking | Name, email and booking details entered by the visitor | United States |
| Website analytics | Measures visits and conversions on wynstudio.io | Page views, referrer, hashed or cookie identifiers after consent | United States |
Services you connect
The following are not subprocessors engaged by WYN Studio. They receive data only when a customer or its user connects an account using their own credentials, and they operate under their own terms and privacy policies: Google (Gmail, Google Calendar), Microsoft (Outlook and Microsoft 365 mail and calendar), customer-owned telephony accounts, customer-owned email sending services and SMTP servers, customer-owned AI provider accounts and self-hosted models, e-signature services the customer enables, and automation platforms such as Zapier. Disconnecting an account in settings stops further access.
Change log
- 2026-09-15: revised to list providers by category; added speech recognition, voice synthesis, secrets management, bot detection and scheduling categories; removed the e-signature vendor row (native e-signature is provided in the Service); moved connected services to their own section; removed the beta credentials note.
- 2026-09-15 (revision 2): added website analytics; conversational AI platform row now covers the Sentinel staff chat assistant; error monitoring row notes masked screen replay on error; removed sign-in providers from connected services (sign-in is by email and password).
Contact: privacy@wynstudio.io. Desk Plus LLC d/b/a WYN Studio, 3750 NW 87th Ave Suite 700, Doral, FL 33178.