Subprocessors

Role of Subprocessors

At Curiosity we use the third party entities below (“Subprocessors”) to process personal data on behalf our customers (”you”). This is done in accordance with the Terms between Curiosity and you to uphold our commitments in the Privacy Policy.

We review compliance of our Subprocessors to verfiy they implement appropriate technical and organizational measures, and to ensure the subprocessing of personal data is protected to the standards required by applicable data protection laws.

For each Subprocessor, your personal data will be processed only for the duration of use of the Services, and for the retention periods as set out in the Terms and any applicable product documentation.

Further information relating to Subprocessor security measures can be found via the external links below. For questions about Sub-processing, please contact us hello@curiosity.ai.

List of Subprocessors

Stripe (Desktop App, Managed Team Workspaces)

• Nature and Purpose: Payment processing for account handling.

• Data Categories: Name, email, address, payment details (not visible to Curiosity).

• Processing Location: Depends on user location. For EEA, UK, Switzerland users: Ireland, UK.

• Security: Stripe Data Processing Agreement.

Mixpanel (All)

• Nature and Purpose: Telemetry for product development.

• Data Categories: Email.

• Processing Location: EU Residency.

• Security: Mixpanel Data Processing Addendum.

Mailersend (Desktop App, Managed Team Workspaces)

• Nature and Purpose: Communications technology provider for product notifications.

• Data Categories: Name, email.

• Processing Location: International.

• Security: Mailersend legal and privacy policies.

Mailerlite (All)

• Nature and Purpose: Communications technology provider for product notifications.

• Data Categories: Name, email.

• Processing Location: International.

• Security: Mailerlite legal and privacy policies.

Crisp (Desktop App, Managed Team Workspaces)

• Nature and Purpose: Communications technology provider for chat support.

• Data Categories: Name, email, IP.

• Processing Location: Netherlands, Germany.

• Security: Crisp security practices, Crisp privacy and legal policies.

Raygun (All except On-prem Workspaces)

• Nature and Purpose: Error logs for troubleshooting.

• Data Categories: Email.

• Processing Location: USA.

• Security: Raygun privacy policy.

Google Analytics (Website)

• Nature and Purpose: Web analytics (website only, not Curiosity app).

• Data Categories: Cookies.

• Processing Location: USA.

• Security: Google Analytics Terms of Service.

Hetzner (Managed Team Workspaces)

• Nature and Purpose: Data hosting for managed server search.

• Data Categories: Any data uploaded to Curiosity Workspace (encrypted).

• Processing Location: Germany.

• Security: Hetzner data privacy policy.

Cloudflare (Website)

• Nature and Purpose: Content delivery network provider (website only, not Curiosity app).

• Data Categories: Name, email.

• Processing Location: Customer traffic is processed globally at the data center closest to the end user.

• Security: Certifications and Compliance Resources, Cloudflare Sub-Processors.

OpenAI (Desktop App, Managed Team Workspaces)

• Nature and Purpose: Generate text responses to prompts using ChatGPT (developer license).

• Data Categories: Any data actively submitted by user to the AI Assistant.

• Processing Location: USA.

• Security: OpenAI Enterprise privacy policy.