At Curiosity we use the third party entities below (“Subprocessors”) to process personal data on behalf our customers (”you”). This is done in accordance with the Terms between Curiosity and you to uphold our commitments in the Privacy Policy.

We review compliance of our Subprocessors to verfiy they implement appropriate technical and organizational measures, and to ensure the subprocessing of personal data is protected to the standards required by applicable data protection laws.

For each Subprocessor, your personal data will be processed only for the duration of use of the Services, and for the retention periods as set out in the Terms and any applicable product documentation.

Further information relating to Subprocessor security measures can be found via the external links below. For questions about Sub-processing, please contact us [email protected].

Subprocessor Applies for Nature and Purpose of Processing Categories of personal data Location of processing Security measures
Stripe Desktop app

Managed Team Workspaces (automatic billing) | Payment processing for account handling | Name, email, address

Payment details (not visible to Curiosity) | Depends on user location

For EEA, UK, Switzerland users: Ireland, UK | https://stripe.com/en-gb-de/legal/dpa | | Mixpanel | All | Telemetry for product development | Email | https://docs.mixpanel.com/docs/other-bits/privacy-and-security/eu-residency | https://mixpanel.com/legal/dpa | | Mailersend | Desktop app, Managed Team Workspaces | Communications technology provider for product notifications | Name, email | https://www.mailersend.com/legal/data-processing-addendum | https://www.mailersend.com/legal | | Mailerlite | All | Communications technology provider for product notifications | Name, email | https://www.mailerlite.com/legal/data-processing-agreement | https://www.mailerlite.com/legal | | Crisp | Desktop app, Managed Team Workspaces | Communications technology provider for chat support | Name, email, IP | https://help.crisp.chat/en/article/whats-crisp-eu-gdpr-compliance-status-nhv54c/ | https://docs.crisp.chat/guides/others/security-practices/

https://help.crisp.chat/en/category/legal-security-1t29poq/ | | Raygun | All except On-prem Workspaces | Error logs for troubleshooting | Email | https://raygun.com/gdpr | https://raygun.com/privacy | | Google Analytics | Website | Web analytics (website only, not Curiosity app) | Cookies | USA | https://marketingplatform.google.com/about/analytics/terms/us/ | | Hetzner | Managed Team Workspaces | Data hosting for managed server search | Any data uploaded to Curiosity Workspace (encrypted) | https://www.hetzner.com/unternehmen/rechenzentrum | https://www.hetzner.com/legal/privacy-policy | | Cloudflare | Website | Content delivery network provider (website only, not Curiosity app) | Name, email | Customer traffic is processed globally at the https://www.cloudflare.com/network/ closest to the end user. | https://www.cloudflare.com/en-gb/trust-hub/compliance-resources/

https://www.cloudflare.com/en-gb/gdpr/subprocessors/ | | OpenAI | Desktop app, Managed Team Workspaces | Generate text responses to prompts using ChatGPT (developer license) | Any data actively submitted by user to the AI Assistant | USA | https://openai.com/enterprise-privacy |

Last updated October 2023