What are your sub-processors, as defined by the GDPR?
Under the GDPR, a sub-processor is any business or contractor customer data may pass through as a side effect of using RescueTime's service. This definition is very broad and includes things some might simply consider "hardware", like cloud infrastructure.
We use partners for some business processes that are not core to our expertise but are critical to our customers having a quality experience. Here is our list of sub-processors:
| Amazon AWS | USA | Cloud Infrastructure for our apps and services |
| Paypal, Inc (Braintree subsidiary) | USA | Customer payments |
| Helpscout, Inc. | USA | Customer support |
| Customer.io | USA | Customer interactions |
| SurveyMonkey | USA | Customer feedback |
| ChartMogul | Germany | Business analysis |
| Google, Inc | USA | Site analytics (web) and customer interactions (email) |
| Open.ai (Optional to User) |
USA | Product feature enhancements; our users choose to enable or not. Data is never used in model training. |