This page lists every third-party service AsideMe uses to deliver its product. Each one processes some piece of your data on our behalf. We list them here so you know who, what, where, and how to find out when this list changes.
If you sign a Data Processing Addendum with us (see DPA), this list is the official list of authorized sub-processors at the time of signature. Material changes are notified at least 30 days in advance — see the bottom of this page.
Current sub-processors
| Service | Purpose | Data processed | Location |
|---|---|---|---|
|
Anthropic, PBC privacy policy |
Generates answers, quizzes, flashcards, and summaries using the Claude API. | Your questions; relevant portions of your transcript or uploaded materials; system prompts. | United States |
|
Deepgram, Inc. privacy policy |
Real-time speech-to-text transcription of the audio you choose to capture. | Live audio stream (discarded by AsideMe after transcription; retention at Deepgram per their policy). | United States |
|
Resend, Inc. privacy policy |
Sends transactional email — magic-link verification, billing receipts, account notifications. | Your email address; the email subject and body for that one message. | United States |
|
Stripe, Inc. privacy policy |
Processes subscription payments and stores card details (we never see your card number). | Your email address; subscription metadata. Card data is collected directly by Stripe. | United States / global |
|
Fly.io, Inc. privacy policy |
Hosts the AsideMe servers and the persistent volume that stores your account database. | Everything AsideMe stores: account row, sessions, transcripts, questions, answers, uploaded files. Encrypted at rest. | Atlanta, USA (primary region) |
|
Google Fonts privacy policy |
Serves the Fraunces and Geist typefaces used in the marketing pages. | Your IP address (whenever your browser requests a font file). | Global edge network |
|
Cloudflare CDN (via cdnjs) privacy policy |
Serves the Prism syntax-highlighting library used to render code samples in the app. | Your IP address (whenever your browser requests a Prism file). | Global edge network |
Optional sub-processors
If your STT provider env var is set to one of these, the corresponding service receives the audio stream instead of Deepgram. Self-hosting customers may pick differently. AsideMe itself does not send audio to any of these unless you configure it.
- AWS Transcribe — Amazon Web Services, Inc. (United States)
- Google Cloud Speech-to-Text — Google LLC (United States)
- Microsoft Azure Speech — Microsoft Corporation (United States)
- OpenAI Whisper API — OpenAI, L.L.C. (United States)
What is NOT a sub-processor
- Analytics — AsideMe does not use Google Analytics, Mixpanel, Amplitude, Segment, PostHog, or any other product-analytics service.
- Advertising — no ad networks, no remarketing pixels, no Meta Pixel, no LinkedIn Insight tag.
- Error tracking — Sentry is not currently in use. If we add it, this page will be updated 30 days in advance.
Cross-border transfers
If you access AsideMe from outside the United States, your data is transferred to and processed in the United States by our processors above. Where required, we rely on Standard Contractual Clauses (SCCs) and equivalent transfer mechanisms.
How we notify changes
Before we add or remove a sub-processor that processes your data:
- Material additions — we update this page at least 30 days before the new processor goes live. If you've signed a DPA with us, you also get an email at the address on the DPA.
- Removals — we update this page on or before the day the processor is removed.
- Sub-processor's privacy-policy URL changes — we update the link silently; no notification.
Object to a sub-processor
If you don't want your data processed by one of the sub-processors above, you can stop using the service and request account deletion via Your rights in the Privacy Policy. For DPA customers, see the objection procedure in your signed DPA.
Contact
Questions about this list or about how we handle a specific processor? Email compliance@asideme.app.