1. How provider terms apply
Trace Intake uses an outside provider only when its infrastructure or an enabled feature requires that provider. These providers maintain their own terms and may change them. The links below are a current disclosure directory, not a copy of those documents or a promise that they will never change.
When William Osborne provisions a resource under the Trace Intake owner account, he is the provider's direct customer and must operate the resource within that provider's agreement. The participating business must use the Trace Intake feature within the customer-facing Terms and Acceptable Use Policy, including restrictions that are needed to keep the underlying provider account compliant. When a business connects its own storage account, that business has the direct relationship with its chosen storage provider.
Trace Intake does not use advertising trackers, a third-party analytics product, public account creation, or live checkout on the current private-beta website. A provider listed here is not automatically given every category of information; the applicable feature and data path determine what it receives.
Infrastructure
2. Cloudflare
Role: DNS, HTTPS certificates, website delivery, security filtering, and Cloudflare Tunnel connectivity between a public intake address and the business installation.
Information involved: ordinary website or Tunnel request data such as IP address, browser or connection details, requested host and path, timestamps, routing information, and security signals. Operational form or call data may pass through the encrypted Tunnel in transit, but the Trace Intake design does not use Cloudflare as long-term business-record storage.
Answering Service
3. Twilio
Role: Canadian telephone-number provisioning, inbound call connection, greeting and menu delivery, keypad selections, temporary recording, signed callback delivery, and usage or cost records.
Information involved: caller and called numbers, call identifiers, timing, routing and carrier metadata, keypad selections, temporary audio recordings, callback details, and account usage. Trace Intake removes the remote Twilio recording after both configured business storage roots confirm delivery. Telecommunications carriers may also process call and routing information under their own legal obligations and are not necessarily Twilio subprocessors.
Business responsibility: the business must give required recording and transcription notices, obtain any required consent, avoid prohibited or deceptive calling practices, and never present Trace Intake as an emergency service.
AI processing
4. OpenAI
Role: bounded API transcription, classification, structured summaries, and other configured analysis tasks.
Information involved: the recording, text, or structured fields needed for the selected task, along with technical request and usage information. OpenAI states that business API inputs and outputs are not used to improve its models by default. Its service, security, abuse-monitoring, legal, and retention rules still apply.
Business responsibility: automated output can be incomplete or wrong. The business must review uncertain or consequential results and must not use the private beta for prohibited high-impact, emergency, safety-critical, or unlawful decisions.
Future billing
5. Stripe
Current status: Stripe remains in Sandbox. The private-beta website has no live checkout, and approved testers pay $0.
Future role: hosted checkout, subscriptions, invoices, refunds, payment-method handling, fraud prevention, tax support, and transaction records after commercial billing is deliberately enabled. Trace Intake is not designed to store full payment-card numbers or security codes.
Optional business storage
6. Customer-selected storage
Trace Intake can write to a local folder or a folder synchronized through a business-controlled Google Drive, Microsoft OneDrive, Dropbox, or similar account. The business chooses and administers that account, its users, region, sharing, backup, and retention. Trace Intake does not provision those accounts and does not turn the storage provider into an owner-side warehouse.
Domain registration
7. Squarespace Domains
Squarespace is the current registrar for the traceintake.ca domain. It manages domain registration and registrant records. Cloudflare, not Squarespace, currently handles the public DNS and website delivery. Squarespace is not used to host Trace Intake customer operational records.
8. Provider review and changes
Provider links, roles, locations, retention, and subprocessor information must be reviewed before commercial launch, when a material provider or data path changes, and at least annually after launch. A new provider or materially different purpose will not be silently enabled. The Privacy Policy and this directory must be updated first, and customer notice or approval will be obtained where required.
This directory does not replace the Privacy Policy, Terms of Service, Acceptable Use Policy, or the separate agreements maintained by each provider.