Subprocessor List
Kajo Voice uses the following third-party subprocessors to deliver its services. All subprocessors are contractually bound to process data only as directed by Kajo and in compliance with applicable data protection law (GDPR, UK GDPR, CCPA). Kajo's core transcription runs entirely on-device — no audio or transcript data is sent to any subprocessor.
| Subprocessor | Purpose | Location | Data types | Links |
|---|---|---|---|---|
| Paddle | One-time lifetime purchase checkout and payment processing (no subscriptions) | United States / EU | Billing address, payment method token, purchase history, email | |
| Amazon Web Services (AWS) | Cloud infrastructure: Lambda, API Gateway, DynamoDB (license/session/feedback), SQS, Secrets Manager | AWS us-east-1 (DynamoDB + Lambda + API Gateway) | License keys, session metadata, feedback text, API request metadata, CloudWatch logs | |
| Cloudflare | Authoritative DNS and inbound email routing for kajovoice.com (the site and releases are served from CloudFront) | Global edge network (EU and US nodes) | DNS query metadata; inbound email metadata and content for @kajovoice.com addresses — no audio, no transcripts | |
| Hugging Face | Fallback source for on-device model weights — models download from Kajo's asset CDN first, from Hugging Face when the CDN is unavailable | Global CDN | Download request metadata — no audio, transcript, or personal content | |
| Plausible Analytics | Privacy-first website analytics on kajovoice.com (no cookies, no cross-site tracking) | EU only (Hetzner, Germany; UpCloud, Finland) | Anonymized page views, referrer headers, country-level location — no personal data | |
| PostHog | Opt-in product analytics for the desktop app and backend (event counts only — never audio or transcripts) | EU — Frankfurt (eu.posthog.com) | Hashed install id, event names/counts, plan tier, platform — no audio, no transcripts | |
| Resend | Transactional email delivery — the one-time license-key email sent after purchase | United States (customer data stored in the US) | Recipient email address and the license-key email content — retained by Resend for 30 days (backups up to 7 days more), then purged; no audio, no transcripts | |
| Sentry | Error monitoring and crash reporting for desktop app and backend | United States (Sentry US region) | Stack traces, device metadata, app version — no audio, no transcript content |
Notification of changes
Kajo will provide at least 30 days advance notice before engaging a new subprocessor that will process personal data. Customers subject to a Data Processing Addendum (DPA) may object to a new subprocessor within that window by contacting privacy@kajovoice.com .
Standard Contractual Clauses
For transfers of personal data from the EU/EEA or UK to subprocessors in third countries, Kajo relies on the European Commission's Standard Contractual Clauses (SCCs, 2021) and, for UK transfers, the International Data Transfer Addendum (IDTA). Copies are available on request at privacy@kajovoice.com .
Contact
Questions about this subprocessor list or Kajo's data processing practices: privacy@kajovoice.com .