Subprocessors & Third-Party Services
The categories of vendors that may process data on our behalf, and how we select and monitor them.
1. Purpose
To deliver marketing, automation, development, and recruiting services, Leoserv Inc. relies on established third-party platforms. This page describes the categories of those vendors and the data each category may process. It supplements our Privacy Policy and Data Security Policy.
2. Vendor Categories
- CRM and marketing automation — contact records, conversation history, campaign activity.
- Cloud hosting and databases — application data for websites, portals, and web apps we build.
- Email and SMS delivery — sender addresses, recipient contact details, message content, delivery status.
- Advertising platforms — campaign configuration, conversion events, audience segments.
- Analytics and reporting — aggregated site and campaign performance data.
- AI and language model services — text submitted for drafting, summarization, and enrichment.
- Scheduling and video conferencing — appointment details and attendee contact information.
- E-signature, document storage, and support ticketing — agreements, project files, and support correspondence.
- Payment processing — billing contact and transaction details. We do not store full card numbers.
3. How We Vet Vendors
- We prefer established providers with published security documentation and a data processing agreement.
- We limit the data each vendor receives to what the integration requires.
- Credentials are stored in secret managers and access is restricted to the team members who need it.
- We review a vendor's posture before adoption and reassess when the scope of processing changes.
4. AI Services
We use business-grade AI services and do not knowingly submit sensitive personal data, payment card data, or protected health information to AI models. We do not use one client's proprietary data to benefit another client.
5. International Transfers
Some vendors process data outside the United States. Where personal data of individuals in the UK or EU is involved, we rely on the vendor's standard contractual clauses or equivalent transfer mechanism.
6. Client-Directed Tools
When a client asks us to work inside their own platforms or accounts, that client remains the controller of those systems and their vendor terms govern that processing. We follow the client's instructions and access only what the engagement requires.
7. Requesting the Current List
Clients under an active agreement may request the specific named vendors used in their engagement by emailing support@leoserv.com. We will provide the current list and notify the account contact of a material change to a vendor that processes their data.
8. Changes to This Policy
We may update this policy as our services, vendors, or legal obligations change. When we do, we revise the Last Updated date above and post the current version on this page. Material changes affecting active engagements are communicated by email to the primary contact on the account.
Continued use of our website, systems, or services after an update constitutes acceptance of the revised policy.
9. Governing Law
This policy is governed by the laws of the State of Texas, without regard to conflict-of-law principles. Any dispute arising from this policy is subject to the exclusive jurisdiction of the state and federal courts located in Montgomery County, Texas.
10. Contact Us
Questions about this policy? Email support@leoserv.com, call +1 (877) 778-2970, or visit our contact page.