Legal
Lethra.ai
Lethra.aiSubprocessors
Last updated: October 22, 2026
When your funeral home uses Lethra, you are the controller of the personal data you put in and Lethra processes it on your behalf. To deliver the service we rely on the companies below, which may process that data for us. Each one is bound by a data processing agreement.
Companies that process data for us
| Company | Purpose | Data it receives | Location | Transfer safeguard |
|---|---|---|---|---|
| Supabase | Database, sign-in, file storage and server functions | All data in your account: staff accounts, cases, families, calls, emails and documents | Ireland (EU) | Not needed: stays in the EU |
| Cloudflare | Hosting the app and custom website domains | Website and app traffic, including IP addresses | Global network | Standard Contractual Clauses |
| Lovable | Development platform and gateway for some API connections | Requests that pass through the gateway, such as domain and business listing details | United States | Standard Contractual Clauses |
| OpenAI | Voice assistant on the phone and website, text and image generation | Live call audio, transcripts, callers' names and phone numbers, case details | United States | Standard Contractual Clauses |
| Anthropic | AI assistant, email drafting and sorting, meeting notes and document analysis | Email content, meeting transcripts, documents, and details of families and the deceased | United States | Standard Contractual Clauses |
| Twilio | Phone calls and text messages | Phone numbers, call audio while it is routed, call details, text message content | United States | Standard Contractual Clauses |
| ElevenLabs | Speech-to-text for meetings and dictation | Meeting and dictation audio, and the resulting transcripts | United States | Standard Contractual Clauses |
| AgentMail | Email inboxes for the assistant, and system emails such as invitations | Email content and attachments, names and email addresses | United States | Standard Contractual Clauses |
| Firecrawl | Reading public websites during setup and research | Website addresses and search queries, which can include case context | United States | Standard Contractual Clauses |
| Browserless | Screenshots of websites and ad designs | Website addresses and the content of the pages it renders | United States | Standard Contractual Clauses |
| PostHog | Product analytics | Pages visited, features used, user ID, IP address and device details | United States | Standard Contractual Clauses |
| Google Fonts | Web fonts on lethra.ai and in the app | Visitors' IP addresses and browser details | United States | Standard Contractual Clauses |
Supabase
- Purpose
- Database, sign-in, file storage and server functions
- Data it receives
- All data in your account: staff accounts, cases, families, calls, emails and documents
- Location
- Ireland (EU)
- Transfer safeguard
- Not needed: stays in the EU
Cloudflare
- Purpose
- Hosting the app and custom website domains
- Data it receives
- Website and app traffic, including IP addresses
- Location
- Global network
- Transfer safeguard
- Standard Contractual Clauses
Lovable
- Purpose
- Development platform and gateway for some API connections
- Data it receives
- Requests that pass through the gateway, such as domain and business listing details
- Location
- United States
- Transfer safeguard
- Standard Contractual Clauses
OpenAI
- Purpose
- Voice assistant on the phone and website, text and image generation
- Data it receives
- Live call audio, transcripts, callers' names and phone numbers, case details
- Location
- United States
- Transfer safeguard
- Standard Contractual Clauses
Anthropic
- Purpose
- AI assistant, email drafting and sorting, meeting notes and document analysis
- Data it receives
- Email content, meeting transcripts, documents, and details of families and the deceased
- Location
- United States
- Transfer safeguard
- Standard Contractual Clauses
Twilio
- Purpose
- Phone calls and text messages
- Data it receives
- Phone numbers, call audio while it is routed, call details, text message content
- Location
- United States
- Transfer safeguard
- Standard Contractual Clauses
ElevenLabs
- Purpose
- Speech-to-text for meetings and dictation
- Data it receives
- Meeting and dictation audio, and the resulting transcripts
- Location
- United States
- Transfer safeguard
- Standard Contractual Clauses
AgentMail
- Purpose
- Email inboxes for the assistant, and system emails such as invitations
- Data it receives
- Email content and attachments, names and email addresses
- Location
- United States
- Transfer safeguard
- Standard Contractual Clauses
Firecrawl
- Purpose
- Reading public websites during setup and research
- Data it receives
- Website addresses and search queries, which can include case context
- Location
- United States
- Transfer safeguard
- Standard Contractual Clauses
Browserless
- Purpose
- Screenshots of websites and ad designs
- Data it receives
- Website addresses and the content of the pages it renders
- Location
- United States
- Transfer safeguard
- Standard Contractual Clauses
PostHog
- Purpose
- Product analytics
- Data it receives
- Pages visited, features used, user ID, IP address and device details
- Location
- United States
- Transfer safeguard
- Standard Contractual Clauses
Google Fonts
- Purpose
- Web fonts on lethra.ai and in the app
- Data it receives
- Visitors' IP addresses and browser details
- Location
- United States
- Transfer safeguard
- Standard Contractual Clauses
Integrations you choose to connect
These services only receive data when your funeral home turns on the integration. The data is sent on your instruction, to your own account with the provider.
| Company | Purpose | Data it receives | Location | Transfer safeguard |
|---|---|---|---|---|
| Google Workspace | Gmail and Google Calendar sync | Emails, attachments and calendar events in the connected account | United States | Standard Contractual Clauses |
| Google Business Profile | Managing your Google Business Profile | Business listing details, reviews and the updates you post | United States | Standard Contractual Clauses |
| Google Ads | Publishing ads and reporting results | Campaign details and ad results | United States | Standard Contractual Clauses |
| Meta | Facebook and Instagram ads, lead forms, and posts you publish on your Page | Campaign details, names, email addresses and phone numbers from lead forms, and the text and images of your posts, including shared obituaries | United States | Standard Contractual Clauses |
| OpenAI Ads | Ads in ChatGPT and conversion reporting | Campaign details and lead conversion events | United States | Standard Contractual Clauses |
| eLys (Athumi) | Death registration with the Flemish government | Details of the deceased and the informant needed for the registration, including national register numbers | Belgium (EU) | Not needed: stays in the EU |
Google Workspace
- Purpose
- Gmail and Google Calendar sync
- Data it receives
- Emails, attachments and calendar events in the connected account
- Location
- United States
- Transfer safeguard
- Standard Contractual Clauses
Google Business Profile
- Purpose
- Managing your Google Business Profile
- Data it receives
- Business listing details, reviews and the updates you post
- Location
- United States
- Transfer safeguard
- Standard Contractual Clauses
Google Ads
- Purpose
- Publishing ads and reporting results
- Data it receives
- Campaign details and ad results
- Location
- United States
- Transfer safeguard
- Standard Contractual Clauses
Meta
- Purpose
- Facebook and Instagram ads, lead forms, and posts you publish on your Page
- Data it receives
- Campaign details, names, email addresses and phone numbers from lead forms, and the text and images of your posts, including shared obituaries
- Location
- United States
- Transfer safeguard
- Standard Contractual Clauses
OpenAI Ads
- Purpose
- Ads in ChatGPT and conversion reporting
- Data it receives
- Campaign details and lead conversion events
- Location
- United States
- Transfer safeguard
- Standard Contractual Clauses
eLys (Athumi)
- Purpose
- Death registration with the Flemish government
- Data it receives
- Details of the deceased and the informant needed for the registration, including national register numbers
- Location
- Belgium (EU)
- Transfer safeguard
- Not needed: stays in the EU
Changes to this list
We tell customers about a new subprocessor at least 30 days before it starts processing their data, so there is time to object. To receive these notices, email privacy@lethra.ai.