Subprocessors
Effective date: October 4, 2026
What a subprocessor is
A subprocessor is a company we use to help provide TalkingDot that may process personal data on our behalf, such as the provider that hosts our servers. We use only subprocessors that are bound by written data-protection obligations, and we remain responsible for them under our Data Processing Addendum.
Current subprocessors
| Subprocessor | Purpose | Location | Data |
|---|---|---|---|
| Hosting provider: [name to be added by the operator] | Runs the servers, database and file storage for the whole service | [Country or region] | All service data: accounts, workspace content, contacts, conversations and attachments |
| Email delivery: [SMTP provider name] | Sends account emails, teammate notifications and emails to visitors, such as missed replies and transcripts | [Country or region] | Names, email addresses and email content, which can include message text |
| Cloudflare, Inc. (if used for DNS/CDN) | DNS, content delivery and protection against attacks; can supply the visitor-country header used for approximate location | Global network | IP addresses and all request data passing through its network |
| CAPTCHA provider (if enabled): Cloudflare Turnstile, hCaptcha or Google reCAPTCHA | Bot protection on the sign-up, sign-in and contact forms | [Provider's location] | IP address and browser signals of people using those forms |
| Google Analytics (public website only, after consent, if enabled) | Visit statistics for our public website | [Location as stated by Google] | Pseudonymous identifiers, pages visited, device type and approximate location of visitors to our public website; no dashboard or messenger data |
Rows marked "if used" or "if enabled" apply only while that service is switched on.
Services you choose to connect
If a workspace connects Slack, Discord or Telegram, sets up webhooks or uses the REST API, data goes to the destinations that workspace chooses. Those services are chosen by the customer, not by us, so they are not our subprocessors. Browser push notifications for teammates pass through the browser maker's push service in encrypted form, which that service cannot read.
How we tell you about changes
Before a new subprocessor starts processing personal data, we update this page and the effective date at the top. Customers can object as described in our Data Processing Addendum. To receive an email when this list changes, write to privacy@talkingdot.com.