Subprocessors
DuckType uses a small set of infrastructure, payment, email, analytics, support, and processing providers to operate the product.
Last updated 29 July 2026
Current subprocessors
These providers process personal data on DuckType's instructions, under a data processing agreement with DuckType.
| Provider | Purpose | Data involved |
|---|---|---|
| CloudflareCloudflare, Inc. | Hosting, Workers, R2 object storage, and rate limiting | Account, usage, audio, or generated content where a DuckType feature uses those services |
| Fireworks AIFireworks.ai, Inc. | Hosted language-model inference for DuckType Cloud AI features | Prompt or transcript text and generated responses needed to provide the requested feature; prompt and response content is not persistently retained |
| NeonNeon, LLC (Databricks, Inc.) | Postgres database hosting | Account, subscription state, notes, meetings, usage records, support metadata |
| GroqGroq LLC | Cloud transcription and AI processing | Audio, prompt hints, transcript text, or meeting content needed to provide the requested feature |
| ElevenLabsEleven Labs Inc. | Cloud transcription | Audio and prompt hints needed to return a transcript |
| DeepgramDeepgram, Inc. | Cloud transcription | Audio and prompt hints needed to return a transcript |
| OpenAIOpenAI OpCo, LLC | Cloud transcription | Audio and prompt hints needed to return a transcript |
| ResendPlus Five Five, Inc. | Transactional email and product update email | Email address, message metadata, email content |
| PostHog EUPostHog Inc. | Product analytics and feature flags when enabled | Device or user identifiers, event names, coarse settings, performance metrics |
| ZulipKandra Labs, Inc. | Support, feedback routing, and operational notifications | Support messages, feedback, issue reports, inbound email content, account and billing event alerts, optional content the user submits |
Independent controllers
These companies receive personal data in connection with DuckType but decide how they process it themselves, so they are not DuckType's processors. Polar is the merchant of record for purchases, which makes it the seller for that transaction. Sign-in providers handle your authentication under their own terms and privacy policies.
| Provider | Purpose | Data involved |
|---|---|---|
| PolarPolar Software, Inc. | Merchant of record for purchases, subscriptions, invoices, billing portal | Billing identifiers, subscription status, payment metadata |
| Google, Microsoft, AppleGoogle LLC, Microsoft Corporation, Apple Inc. | Optional OAuth sign-in providers | Identity information returned by the provider when the user chooses that sign-in method |
User-selected providers
If you configure your own transcription, language model, or other provider, that provider is selected by you. Their processing is governed by your account, terms, and privacy relationship with that provider.
Changes
DuckType may update this list when providers change. Material changes will be reflected on this page, and we will use reasonable efforts to avoid changes that materially weaken privacy or security protections.