Wysa List of Service Providers

Initial Effective Date: June 30, 2017 (GMT)
Latest Revised Date: March 27, 2025 (GMT)

Service Providers Purpose Data Storage Location
Amazon Web Services (AWS) Across all apps and services.

Data Types: All data submitted and collected from you during App use.
Purpose: They help provide cloud-based systems, tools and APIs that keep our service running smoothly and securely.

USA or UK residency (based on service offered)
MongoDB ATLAS Across all apps and services.

Data Types: All data submitted and collected from you during App use.
Purpose: They provide use of a database to keep your information safe. This database resides on AWS.

USA or UK residency (based on service offered)
Firebase, Google Analytics Across all apps and services.

Data Types: Anonymised event data, Cookie Information.
Purpose: They look at how you use our App to improve the experience. We do not share what you talk about or any personal details with the third party. All the actions you do in the App are given false names so they cannot tell who you are or learn anything about your health or feelings.

USA
Branch.io To provide apps and services on behalf of your Institution.

Data types: Communication data (Institution supplied email ID).
Purpose: They help provide a special link that helps you access our App more easily.

USA
Google Workspace Across all apps and services.

Data types: Communication data (email identifiers)
Purpose: To answer your questions, requests, and feedback. They help us keep records without using your personal data.

Europe

CloudFlare

Across all apps and services.

Data: Device Data (Internet protocol address).
Purpose: They help us keep our services secure and running smoothly. They need to use your IP address to do this. Wysa does not store or use your IP address after it has been used by Cloudflare. Your IP address is never linked to your conversations, so everything you chat about stays private. Also, Cloudflare might look at information like your browser and operating system to prevent any misuse.

Edge locations, USA
Mailgun (Sinch) To provide apps and services on behalf of your Institution.

Data: Communication data (Institution supplied email ID).
Purpose: We use a service called Mailgun to send an email to your Institution when you trigger an SOS, Self-harm, or abuse alert in the App. The email will have your name, contact, and the message that caused the alert. These emails are kept safe and encrypted, and they are deleted from Mailgun's servers once they are sent successfully. We keep your email details for record-keeping as agreed with your Institution.

USA
Zendesk Across all apps and services.

Data: Communication data (email and other identifiers).
Purpose: This is our customer support system. We use it to collect and answer your questions and requests for help.

USA
Microsoft Azure Translator API Where language translations are enabled.

Data: Conversation data
Purpose: To change your messages and Wysa's messages from another language to English and back again.

USA
Zoom When you use the Wysa Coach, Wysa Medical Assistant or group sessions.

Data: Conversation data (audio-video sessions only).
Purpose: We use Zoom healthcare (which is safe and private) to have video and audio calls with our Wysa Coach. This can be done inside or outside our app. If needed, Wysa Coach uses Zoom to conduct webinars and group sessions for Institutions. We do not record or save Zoom sessions. Zoom might collect more personal information from you to help them provide their service.

USA
Private AI Across all apps and services.

Data: Conversation data
Purpose: The service checks for any personal details you might accidentally share when talking with the AI Coach. It runs on Wysa's cloud servers, so your messages do not go to Private AI.

USA
Open AI When you use the Wysa+ Services.

Data: Conversation data submitted and collected from you during use of Wysa+ Services.
Purpose: To provide Wysa+ Services alongside Wysa’s own propreitary AI. Provide clinically validated tools and resources for support.
Read more in the Wysa+ Privacy Policy.

USA
Twilio When you use the AI Coach over WhatsApp service, use the Wysa Coach or Wysa Medical Assistant.

Data: Conversation data.
Purpose: To programmatically make calls to emergency contact numbers shared by you for your safety during use of the Wysa Coach or Wysa Medical Assistant service. To be used as a Business Solution Provider (BSP) to integrate Wysa’s AI Coach with Whatsapp business. To send a one-time password (OTP) during Chronic Care Management Service.

USA
Google Voice When you use the Medical Assistant Service and receive a voice call by our Medical Assistant.

Data: Conversation data.
Purpose: To call you, when providing healthcare service, to gather inputs and maintain records on behalf of our healthcare customers.

USA
DeepL translation API Where language translations are enabled.

Data types: Conversation data.
Purpose: We use the DeepL translation API when you use our Spanish language AI Coach modules and tools. No data is stored within DeepL servers. All data is deleted immediately after the translation has been completed.

USA
Meta Ads Manager When you use the AI Coach over WhatsApp service.

Data: Information provided by you.
Purpose: To create ad campaigns to spread awareness, generate interest and aid conversions of our product and services. These ad campaigns will be India region focussed and for defined categories of users. These campaigns will run on facebook and Instagram. Analytics will be performed on aggregated data in order to measure the performance and reach of advertising campaigns. We do not collect and store any user specific personal identifiers from Meta.

USA
Salesforce, Pardot Internal business and marketing purposes.

Data Types: Business data, promotional data and correspondence data
Purpose: For finding and recording new business leads and managing our business and marketing operations, as well as for communication in marketing campaigns and gathering customer feedback. We also use these tools for affiliate marketing and other marketing activities. However, we do not connect your personal data from the App with these tools, and we do not share your App data with them. We use Pardot on our website to process data that you or your Institution provide via our website contact forms. We make sure to get proper permission and provide opt-out options when we contact potential customers.

USA
Slintel Internal business and marketing purposes.

Data: Business Data (Prospective business contacts).
Purpose: Slintel sources business data from public websites and provides this data for lead generation and marketing purposes. We use Slintel for the purpose of driving sales and marketing alignment by giving our sales representatives access to the Institution's account data and insights. The services use anonymous buying signals to accurately predict potential sales and marketing campaigns to organizations. Wysa takes appropriate consents or opt-outs when we make such reach outs.

USA
Google Translate Where language translations are enabled.

Data: Conversation data
Purpose: To change your messages and Wysa's messages from another language to English and back again.

USA
Dittofeed Business and marketing purposes.

Data: Business data, and correspondence data
Purpose: We use Dittofeed for the purpose of sending automated messaging and email to you on how to download the Wysa app based on information shared by your Institution. We may also inform you about upcoming campaigns or about our product and services. Where applicable we collect opt-in and provide an option to opt-out or unsubscribe.

USA
Gusto, Checkr, VERO, SpringVerify Internal human resource purposes.

Data types: Recruitment data.
Purpose: To perform background and reference checks for shortlisted candidates.

USA, UK, India
Google Play, Apple Play, Stripe, PayPal, Razorpay Where a payment subscription needs to be processed.

Data types: Payment data
Purpose: We use payment providers such as Stripe, PayPal, Razorpay and those provided by app stores to process payment when you purchase from us. We do not collect and store your credit card related information. We may collect your name, email Id to send you confirmations and for operational purposes.

USA, UK, India

We will keep updating this page where we make any changes to our service provider. If you have any questions please contact us at [email protected] .