Subencargados del tratamiento
Vigente desde: Última actualización:
Slide Practice usa un número reducido de subencargados del tratamiento evaluados, cada uno responsable de una función específica y sujeto a un contrato de tratamiento de datos. Todos ellos aparecen nombrados a continuación, junto con lo que hacen, qué datos ven y dónde operan. No se omite nada de esta lista. Esta página se publica por transparencia y no constituye asesoría legal personalizada.
We do not sell or rent personal data, and we do not share personal data for cross context behavioural advertising. We share personal data only with the service providers (sub-processors) that help us operate Slide Practice. Each acts under a written contract, on our instructions, processes data only for the function shown, and is required to protect it.
The providers you most need to know about are the ones that touch your clients' session content: Recall.ai captures the meeting audio when you turn on Auto Join, OpenAI transcribes that audio into text, and Anthropic drafts the recap from the transcript. We instruct our AI providers not to use the content of your sessions to train their models. If you would like a signed PDF of this list, including each provider's own DPA link, email support@slidepractice.com and we will send one.
1. Our sub-processors
| Sub-processor | What it does | Data processed | Location |
|---|---|---|---|
| Recall.ai Meeting capture | Joins a Zoom or Google Meet call and records it, but only when you turn on Auto Join for a session. Nothing is captured until your client agrees on screen. | Meeting audio | Recording region Asia Pacific (Tokyo); vendor in the United States |
| OpenAI Speech to text | Transcribes session audio into text so a recap can be drafted from it. Instructed not to train on your content. | Session audio | United States |
| Anthropic Recap generation | Drafts the session recap and action items from the session transcript. Instructed not to train on your content. | Session transcripts | United States |
| Supabase Database and file storage | Holds your account, client, and booking records in an encrypted PostgreSQL database, and your session audio and transcripts in encrypted object storage. | All customer data, including session audio and transcripts | Asia Pacific (Tokyo); vendor in the United States |
| Clerk Authentication and identity | Sign in, session management, and account recovery, including bot protection on the sign-in form. Clerk sees your account identity, never your session content. | Email, name, IP address | United States |
| Paddle (Paddle.com Market Ltd) Merchant of record | Paddle (Paddle.com Market Ltd) is our Merchant of Record: it is the seller of record for your subscription, collects your payment, and charges and remits any applicable sales tax or VAT. Paddle appears on your statement. Slide Practice is never in the payment path between practitioners and their clients. | Subscription billing details | United Kingdom / United States |
| Resend Transactional email | Delivers booking confirmations, recap emails, and account and security notifications. | Email addresses, message content | United States |
| Fly.io Application hosting | Runs the Slide Practice application. | Application metadata, request logs | Asia Pacific (Singapore) |
| Vercel Marketing site hosting | Hosts slidepractice.com and the serverless functions behind public profiles, the practitioner directory, and site forms. | Request logs, form submissions | Global edge network; vendor in the United States |
| Plausible Website analytics | Counts page visits without cookies. No cross-site tracking and no advertising profiles. | Aggregate page view data | European Union |
| Sentry Error monitoring | Receives error diagnostics from the application when enabled, so we can find and fix faults. Never receives session recordings, transcripts, or recaps. | Error messages, stack traces, request metadata | United States |
| Upstash Rate limiting | Holds the rate limit counters that block abuse and brute force attempts, when enabled. | Rate limit keys derived from IP address | United States |
| Meta Advertising measurement | Measures signups from our own ads, and only after you give marketing consent. If you do not consent, nothing is sent. Never receives session content. | Page and conversion events | United States |
The locations above describe where data is stored and processed and, where a provider is incorporated in the United States, its domicile. Customer data and uploaded files are hosted in Asia Pacific (Tokyo), application runtime and edge caching run in Asia Pacific (Singapore), and Auto Join meeting recordings are captured in the Asia Pacific (Tokyo) region. As noted in our Privacy Policy, we instruct our AI providers not to use the content of your sessions to train their models. Session recordings, transcripts, and recaps are never sent to Paddle, Plausible, Sentry, or Meta.
2. Changes to this list
This list is current as of the Last updated date at the top of this page, and may change from time to time, with notice, as our providers change. Before we add or replace a sub-processor, we will announce the change by email to all paid customers at least 30 days in advance, so that you have the opportunity to review it. When the list changes, this page changes with it.
You can also review our Privacy Policy, our Data Processing Addendum, our Terms of Service, and our Cookies Policy. For any question about a provider, or to request a signed copy of this list or of the Data Processing Addendum, contact support@slidepractice.com.