Legal
Subprocessors
DuckType uses a small set of infrastructure, payment, email, analytics, support, and processing providers to operate the product.
Last updated 16 May 2026
Current subprocessors
| Provider | Purpose | Data involved |
|---|---|---|
| Cloudflare | Hosting, Workers, R2 object storage, rate limiting, Workers AI | Account, usage, audio or generated content where a DuckType feature uses those services |
| Neon | Postgres database hosting | Account, subscription state, notes, meetings, usage records, support metadata |
| Groq | Cloud transcription and AI processing | Audio, prompt hints, transcript text, or meeting content needed to provide the requested feature |
| Polar | Payments, subscriptions, checkout, invoices, billing portal | Billing identifiers, subscription status, payment metadata |
| Resend | Transactional email and product update email | Email address, message metadata, email content |
| PostHog EU | Product analytics and feature flags when enabled | Device or user identifiers, event names, coarse settings, performance metrics |
| Slack | Support alerts, feedback routing, operational notifications | Support messages, feedback, issue report metadata, optional content the user submits |
| Google, Microsoft, Apple | Optional OAuth sign-in providers | Identity information returned by the provider when the user chooses that sign-in method |
User-selected providers
If you configure your own transcription, language model, or other provider, that provider is selected by you. Their processing is governed by your account, terms, and privacy relationship with that provider.
Changes
DuckType may update this list when providers change. Material changes will be reflected on this page, and we will use reasonable efforts to avoid changes that materially weaken privacy or security protections.