Third Party APIs and Subprocessors

The following table provides an overview of our subprocessor and the APIs we use to provide our services. Each entry has the relevant privacy policy, terms of service and/or data processing agreements linked, where applicable.

SubprocessorPurposeExtend of data accessSecurity Measures / Data Processing
OpenAIGenerate text responses to promptsBits and pieces of provided scripts for processing purposes. Never the whole or significant large pieces.(Privacy Policy)[https://openai.com/enterprise-privacy/]
StripePayment processing & account handlingName & Email & Address as well as payment information (not visible to us)(Data Processing Agreement)[https://stripe.com/en-gb-de/legal/dpa]
AssemblyAITranscriptionFull Audio (no retention)(Privacy Policy)[https://www.assemblyai.com/legal/privacy-policy]
SpeechmaticsTranscriptionSmall bits of Audio (few seconds, no retention)(Privacy Policy)[https://www.speechmatics.com/legal/privacy-policy]
PostHogAnalyticsIP Address, User Agent, Page Visits, Events(Privacy Policy)[https://posthog.com/privacy]
DatalabOCRScript, if given as PDF(Privacy Policy)[https://www.datalab.to/privacy]

Data Processing and Retention

Wherever possible, we opted for processing project data in a way that does not require storing it. For example, we use AssemblyAI for transcription, which processes the audio and returns the text without storing the audio. We also use Speechmatics for transcription, which processes small bits of audio (a few seconds) and does not store the audio.