Subprocessors

ConvertAudioToText relies on the third-party services listed below to deliver the product. We list each, what they do, what categories of data they receive, and where they're located. We update this page whenever we add or remove a subprocessor. Last updated 2026-07-14.

VendorPurposeData typesLocation
CloudflareCDN, DNS, edge proxy, R2 object storage (audio files + recordings)IP address, browser metadata, uploaded audio/video, transcriptsGlobal edge network · US/EU
DeepgramPrimary speech-to-text engine (Nova-3)Audio content, transcripts (transient)United States
OpenAIAI summarization, action item extraction, translationTranscript text (no audio, no PII unless in the transcript)United States
RunPod (Whisper / WhisperX)Fallback speech-to-text for long-form audio + speaker diarizationAudio content, transcripts (transient)United States
Recall.aiMeeting bot that joins Zoom / Meet / Teams / Webex callsMeeting audio, video, participant metadata, recording URLsUnited States
SupadataYouTube public-caption fetcher (no audio download)YouTube video URLs onlyUnited States
Dodo PaymentsMerchant of Record for subscriptions, credit packs, and lifetime purchases (PCI-DSS Level 1)Email, name, payment method (PCI-tokenized; we never see card data)United States
ResendTransactional email delivery (verification, password reset, receipts, lifecycle)Email address, name, message contentsUnited States
LoopsContact sync and lifecycle event trackingEmail, name, plan, signup date, usage eventsUnited States
PostHog (self-hosted at posthog.reachuphq.com)Product analytics, session replay, feature flagsPage views, click events, IP-derived geo, session recordings (form fields are masked)Hetzner, Helsinki, Finland
OpenPanel (self-hosted at opapi-io8sok4wsokc48k40s400480.reachuphq.com)Lightweight analytics (no cookies)Page views, anonymous session countsHetzner, Helsinki, Finland
Google Tag Manager + AnalyticsWeb analytics, conversion trackingPage views, click events, IP-derived geoUnited States
SentryServer-side error monitoring (backend only)Stack traces, request metadata (PII scrubbed)United States
Hetzner CloudApplication + database hostingAll application data at rest (Postgres)Helsinki, Finland · Falkenstein, Germany · Ashburn VA, USA

Questions or DPA requests

For a Data Processing Agreement (DPA), advance notice of subprocessor changes, or any other privacy question, email hi@convertaudiototext.com.