BRASK INC. ("Rask AI," "we," "us," or "our") uses third-party providers to help us host, operate, secure, support, analyze, and improve the Rask AI Service and to provide related functions such as communications and payment processing.
Depending on the relevant processing activity, a provider:
processes personal data on our behalf as a service provider or processor;
acts as a subprocessor where we process Customer Personal Data on behalf of a Customer; or
acts as an independent or joint controller for specified processing activities.
Inclusion in this list does not mean that every provider receives personal data from every user or that a provider receives every category of data described below. We use providers only for the applicable purposes and features and disclose only the data reasonably necessary for those purposes.
For purposes of this page, a Subprocessor is a third party engaged by us to process Personal Data contained in Customer Data where Rask AI acts as a processor on behalf of a Customer. Providers that process personal data for purposes determined by Rask AI, or for their own purposes, are identified separately below.
This page supplements our Privacy Policy, including its disclosures regarding international data transfers. If this page conflicts with an applicable Data Processing Addendum ("DPA"), the DPA will control with respect to the processing covered by that DPA.
The following providers process Customer Personal Data in connection with the delivery, security, support, or operation of the Service.
The location below identifies the primary processing region selected and used by Rask AI for the applicable service. It does not list transient network routing locations or the locations of a provider's own subprocessors.
| Provider and contracting legal entity | Services and purposes | Categories of data | Primary processing location | Role |
|---|---|---|---|---|
| Amazon Web Services, Inc. (AWS) | Cloud hosting, databases, authentication, storage, content delivery, backups, queues, serverless processing, monitoring, encryption/key management, and transactional email, including services such as ECS/EC2, RDS, DynamoDB, S3, CloudFront, ElastiCache, Lambda, SQS/SNS, Cognito, SES, and CloudWatch | Account and contact information; uploaded and generated video, audio, images, and text; authentication data; service metadata; logs and diagnostic data | United States | Subprocessor |
| Cloudflare, Inc. | DNS, CDN, web application firewall, security, traffic routing, and R2 object storage | IP address; request, network, and security metadata; device information; files stored in R2 | United States | Subprocessor |
| Eleven Labs Inc. | Speech synthesis, voice cloning, transcription, diarization, and audio processing | Audio; voice samples; transcripts; speaker information; related metadata | United States | Subprocessor |
| OpenAI OpCo, LLC | Translation, text normalization, summarization, and transcript rewriting through the OpenAI API | Text; transcripts; prompts; generated responses; related metadata | United States | Subprocessor |
| Anthropic, PBC | Text processing and normalization used in speech and localization workflows | Text; transcripts; prompts; generated responses; related metadata | United States | Subprocessor |
| Google LLC | Machine translation, text processing, speech synthesis, duration control, and video/audio analysis through paid, billing-enabled Gemini API, Gemini Files API, Cloud Translation, and Cloud Text-to-Speech services | Video; audio; text; transcripts; prompts; uploaded files; generated responses; related metadata | United States | Subprocessor |
| Microsoft Corporation | Speech synthesis and related audio processing through Azure Speech Services | Text; audio; speech output; related metadata | United States | Subprocessor |
| Synchronicity Labs, Inc. (Sync Labs / Sync.so) | Video and audio lip-sync processing | Video; audio; related project and processing metadata | United States | Subprocessor |
| Functional Software, Inc. d/b/a Sentry | Error tracking, application monitoring, debugging, traces, profiles, and performance diagnostics | Account or user identifiers; IP address; device and browser data; logs; errors; traces; diagnostic data; Customer Data contained in diagnostic events | United States | Subprocessor |
| LogRocket, Inc. | Application session diagnostics and session replay | User or pseudonymous identifiers; device and browser data; page interactions; session events; application content captured in session replay | United States | Subprocessor |
| Mailgun Technologies, Inc. | Transactional email, including invitations and service communications | Name; email address; message content; delivery status and metadata | United States | Subprocessor |
| Intercom, Inc. | Customer support and service communications | Account and contact information; support communications; attachments; technical and interaction metadata | United States | Subprocessor |
| Mixpanel, Inc. | Product usage analytics and server-side product events | User or pseudonymous identifiers; account information; feature usage; event and device metadata | United States | Subprocessor |
These providers are required to operate the Service or to provide the applicable feature requested by the user or Customer. They cannot be individually disabled while the applicable Service or feature is being used.
The following providers process personal data for operational purposes determined by Rask AI, including communications, consent management, customer relationship management, subscription administration, and payments. They do not process Customer Personal Data as Rask AI Subprocessors.
| Provider | Services and purposes | Categories of data | Role |
|---|---|---|---|
| Customer.io | Product communications, customer journeys, and email campaigns | Name; email address; account information; product-event and campaign-interaction information | Service provider / processor |
| MailerLite | Email newsletters and marketing communications | Name; email address; subscription status; campaign-interaction information | Service provider / processor |
| UserCheck | Detection of disposable, invalid, or high-risk email domains | Email domain; validation request and result | Service provider / processor |
| Google Tag Manager | Management and deployment of website and application tags | Tag configuration; technical and usage information | Service provider |
| Cookiebot by Usercentrics | Cookie consent management and recording of privacy choices | Consent ID; IP address; browser and device information; consent status and timestamp | Service provider / processor |
| Hotjar | Website analytics and behavioral insights | IP and device data; page interactions; usage and session information | Service provider / processor |
| Rewardful | Affiliate and referral attribution | Referral and cookie identifiers; customer or subscription identifier; transaction-attribution information | Service provider / processor |
| HubSpot | CRM, forms, meetings, customer communications, sales operations, and related integrations | Name; email address; company; form submissions; meeting information; correspondence; CRM and interaction data | Service provider / processor |
| Churnkey | Subscription cancellation flows, cancellation analytics, and retention offers | Email address; customer and subscription identifiers; plan, billing status, cancellation reason, and offer-response information | Service provider / processor |
| Stripe, LLC | Payments, subscriptions, billing portal, fraud prevention, tax, and payment-related compliance | Name; contact and billing information; payment method and transaction data; device and fraud-prevention information; tax information | Processor for payment processing; independent controller for fraud prevention, compliance, and Stripe's other independently determined purposes |
| Provider | Services and purposes | Categories of data | Role |
|---|---|---|---|
| Google LLC (Google Sign-In) | Optional authentication using a Google account | Google account identifier; name; email address; profile information selected during authorization; authentication metadata | Independent identity provider and controller |
Enterprise Customers can configure their own SAML or other single sign-on provider. A provider selected, contracted, and controlled by the Customer is a Customer-selected third-party product and is not a Rask AI Subprocessor.
The following providers help us measure advertising performance, attribute conversions, and create or optimize advertising audiences.
| Provider | Services and purposes | Categories of data | Role |
|---|---|---|---|
| Meta Platforms, Inc. | Meta Pixel and Conversions API for advertising measurement, attribution, audience matching, and ad optimization | Cookie and device identifiers; IP address; browser information; website and conversion events; hashed contact identifiers | Processor for specified matching and measurement activities; joint controller for the collection and transmission of specified Event Data; independent controller for its subsequent processing |
| Microsoft Corporation (Microsoft Advertising) | Universal Event Tracking (UET), advertising measurement, conversion attribution, and ad optimization | Cookie and device identifiers; IP address; browser information; website and conversion events; hashed identifiers | Independent controller / advertising provider |
| OpenAI OpCo, LLC (OpenAI Ads) | Advertising conversion measurement and attribution through the OpenAI Pixel and related advertising tools | Website and conversion events; country; cookie or device identifiers; hashed email and external identifiers | Independent controller, except that OpenAI acts as a processor for Restricted Processing defined in the applicable OpenAI Ad Tools terms |
| LinkedIn Corporation | Insight Tag, advertising measurement, conversion attribution, audience insights, and advertising audiences | Cookie and device identifiers; IP address; browser information; page and conversion events; hashed email where enhanced matching is enabled | Independent controller / advertising provider |
Hashing identifiers such as email addresses reduces the direct identifiability of the data but does not make the data anonymous. We treat hashed identifiers as personal data.
Where a provider offers a direct opt-out or preference mechanism, users can use the applicable provider controls:
Marketing emails sent through Customer.io, MailerLite, HubSpot, or Intercom include an unsubscribe link.
Access granted through Google Sign-In can be reviewed or revoked through Google Account third-party connections.
Meta advertising preferences can be managed through Meta Ad Preferences.
Microsoft advertising preferences can be managed through the Microsoft privacy dashboard.
LinkedIn advertising preferences can be managed through LinkedIn advertising data settings.
Cookie- and device-based choices are also provided separately on the Rask AI website. Browser and device settings can provide additional controls, although changing those settings can affect website functionality.
We can add, replace, or remove providers as our Service and business operations change. We will update the "Last updated" date when we make a material change to this page.
Where an applicable DPA requires advance notice of a new or replacement Subprocessor, we will provide that notice and any applicable opportunity to object in accordance with the DPA. Updating this public page does not replace any direct notice required by an applicable DPA.
Questions about this page, our providers, or our processing of personal data can be submitted using the contact details provided in our Privacy Policy.