Subprocessors
Draft under review by our counsel. It may still change.
These providers process personal data on our behalf, under a data processing agreement, for the site, the waitlist and the desktop app’s online services. The desktop app itself keeps your security workspace on your computer: none of them sees it. This list exists in French and English; the French version prevails in case of difference.
Current list
| Provider | What it does for us | Data | Location | Safeguard outside the EU |
|---|---|---|---|---|
| OVH SAS (OVHcloud), France | Hosts the site, our API and its database | Everything our servers hold: waitlist signups, accounts, consent proofs | Paris, France | None needed |
| Resend, Inc., United States | Sends our emails (waitlist confirmation, sign-in codes, news) | Email address, email content | Sending from the EU (Ireland), storage in the US | Standard Contractual Clauses, Data Privacy Framework |
| PostHog, Inc., United States | Audience measurement of the site; the app’s telemetry, through our server | Events without content, random IDs; IP discarded | EU Cloud, Frankfurt, Germany | Standard Contractual Clauses |
| Functional Software, Inc. (Sentry), United States | Crash reports from the app and our server, through our server | Technical error details, random install ID | EU region (Germany) | Standard Contractual Clauses |
| Anthropic, PBC, United States | Answers the requests you pay for with QoBot credits | The content of those requests, only while they’re processed | United States | Standard Contractual Clauses |
| GitHub, Inc., United States | Receives the feedback you send from the app, as an issue in our project | Your message, your account ID if signed in | United States | Standard Contractual Clauses, Data Privacy Framework |
With your own API key or your Claude subscription, your AI provider works for you under your own contract: it isn’t our subprocessor.
Not on this list
Ad platforms (Google, LinkedIn, Meta, Microsoft) only receive data if you accept advertising cookies, and they use it as controllers under their own terms. They are listed, with their status, in the Cookie policy.
Changes
We update this page before a new subprocessor starts processing personal data. QoBot Cloud will come with a data processing agreement and its own list. To be told of changes, or for any question, write to privacy@qobot.io.