This page lists the third-party providers that Setten uses to operate the Service. A subprocessor is a provider that processes personal data on our behalf. Some providers listed below may act as independent controllers for specific activities, such as payment processing.
We require subprocessors to process personal data only for the purposes we authorise, keep it confidential, apply appropriate security measures, and meet contractual data protection obligations. We remain responsible for subprocessors we appoint under the Data Processing Agreement.
Subprocessor List
| Subprocessor | Nature and purpose of processing | Location of processing | Additional information |
|---|---|---|---|
| Microsoft Corporation | Cloud infrastructure for application hosting, databases, cache, and logging | Singapore (Azure Southeast Asia region) | Microsoft Trust Center Microsoft Service Trust Portal |
| Cloudflare, Inc. | Object storage for files, recordings, and attachments; transactional email delivery; website delivery and security | Global infrastructure | Cloudflare Trust Hub Cloudflare subprocessors |
| Functional Software, Inc. (Sentry) | Error monitoring, performance monitoring, diagnostics, and debugging | United States | Sentry security Sentry data locations |
| PostHog, Inc. | Product analytics, including screen views, feature usage, and account identifiers for signed-in users | United States | PostHog security PostHog subprocessors |
| OpenAI, L.L.C. | Large language model processing for AI summaries, answers, suggestions, and assistant features | United States | OpenAI Trust Portal OpenAI subprocessors |
| Deepgram, Inc. | Speech-to-text transcription, including live transcription | United States | Deepgram subprocessors Deepgram data privacy compliance |
| AssemblyAI Inc. | Speech-to-text transcription, including live transcription | United States | AssemblyAI security AssemblyAI DPA |
| Soniox Inc. | Speech-to-text transcription, including live transcription | United States | Soniox security and privacy Soniox policies |
| Google LLC | Optional sign-in, Google Calendar integration, and push notifications through Firebase Cloud Messaging | Global infrastructure | Google Cloud Trust Center Google subprocessors |
| Microsoft Corporation | Optional Microsoft sign-in and Outlook Calendar integration | Global infrastructure | Microsoft Trust Center Microsoft Service Trust Portal |
Payment Providers
Paddle is our merchant of record and the seller of your subscription. It acts as an independent controller for payment-related data. We do not receive or store full payment card numbers.
For subscriptions purchased in our mobile apps, Apple (App Store) or Google (Google Play) is the seller and acts as an independent controller for that purchase data.
| Provider | Nature and purpose of processing | Location of processing | Additional information |
|---|---|---|---|
| Paddle.com group entities | Merchant of record; checkout, billing, tax, refunds, and chargebacks | Depends on customer location and Paddle entity | Paddle privacy policy Paddle DPA |
| Apple (App Store) | Seller of in-app subscriptions purchased through the App Store; payment, tax, and refunds | Depends on customer location and Apple entity | Apple privacy policy |
| Google (Google Play) | Seller of in-app subscriptions purchased through Google Play; payment, tax, and refunds | Depends on customer location and Google entity | Google privacy policy |
Changes to this List
If we add or replace a subprocessor that processes Customer Content, we will update this page and give notice by email or in-product notice before the change takes effect, where reasonably practicable.
Customers may object to a new subprocessor on reasonable data protection grounds, as described in Section 5 of the Data Processing Agreement. To receive change notices or ask about a provider listed here, email hi@settenhq.com.