Legal
Subprocessors
Last updated October 8, 2026
These providers support the current desktop and account service. Desktop account synchronization sends job metadata and billing activity, not recording files or transcript text. Support messages contain information you choose to send. Hosted media processing and remote live transcription are not part of the current offer. See the Privacy Policy for how we handle data generally.
| Vendor | Purpose | Data Received | Location | When It Applies |
|---|---|---|---|---|
| Railway | Application and database hosting | Account records, job metadata, billing records, app diagnostics | United States | Always (cloud account) |
| Cloudflare (Pages and R2) | Website delivery and desktop installer storage | Website and download requests; installer files | Global delivery network | When you visit the website or download an app |
| Stripe | Payment processing | Name, email, payment card details (entered directly with Stripe), transaction history | United States | When you purchase credits or a subscription |
| Resend | Transactional email delivery | Email address, message content (verification, receipts, notifications) | United States | Always (account email) |
| Kit | Newsletter and product announcements | Email address, subscription preferences | United States | Only if you opt in to marketing email |
| Google Analytics | Website usage analytics | Page visits, browser and device details, analytics identifiers | Provider infrastructure | When you visit the website or web app |
Changes to This List
Before adding a subprocessor that will handle case content, we update this page and notify account holders by email, giving firm customers a reasonable opportunity to object. Vendors that only handle account or billing records are added to this page as they come into use. Questions: privacy@depoflow.com.