Legal
Subprocessors
Effective August 24, 2026Last updated October 5, 2026
The third-party service providers that help operate Quodra.
Quodra uses selected third-party service providers to help deliver and secure the Service. Some of these providers may process personal information on Quodra's behalf.
The list below reflects Quodra's current production infrastructure and is updated as our service providers change.
Current Subprocessors#
| Provider | Purpose | Data involved | Region |
|---|---|---|---|
| Google Cloud (Google LLC) | The production API, the live-collaboration service and the slide renderer on Cloud Run; the PostgreSQL database on Cloud SQL; object storage; operational logging; Cloud KMS encryption for personal AI API keys where enabled | Account information, User Content, request metadata and technical information; personal API credentials processed for encryption/decryption and stored encrypted, depending on the feature used | europe-west1 (Belgium) for the services, the database and object storage; database backups in Google's European Union multi-region; operational logs in Cloud Logging's global location |
| Cloudflare | Static website and application hosting and content delivery; Workers hosting for the MCP endpoint | IP addresses and request metadata; authorized MCP requests, credentials and content passing through the endpoint | Global network |
| Resend (Plus Five Five, Inc.) | Transactional email — verification and sign-in links, password resets, invitations, sharing notifications, academic verification codes and billing notices — and passing on to Quodra what you send through the website's forms | Recipient email address and message content, including what you send through those forms | United States; Quodra's mail is sent from Japan (Tokyo), the sending region of Quodra's mail domain |
| Paddle (Paddle.com Market Limited, London, and its affiliates) | Merchant of record for paid plans: checkout, payment processing, tax calculation, invoicing, subscription renewals and refunds. Paddle sells the plan to you and is an independent controller of the purchase; Quodra receives the plan, its status and identifiers | Name, email address, billing address and country, payment-method details (held by Paddle, never by Quodra), transaction records | United Kingdom, with transfers between Paddle entities under Standard Contractual Clauses |
| Google (Google LLC) | Sign in with Google (optional); Google Drive import and Google Slides import and export (optional; they reach only files you pick and presentations you export); business email for Quodra's own mailboxes | Identity information when you choose Google sign-in; files you choose to import or export; email you send us | Global (Google LLC, United States) |
| Anthropic (Anthropic PBC) | Native AI authoring for selected workspaces when Ask Quodra is enabled | The instruction, context named by the request's chips, supported attachments, verification feedback and generated output | Anthropic's standard processing locations; the initial beta makes no regional-residency commitment |
| OpenAI (OpenAI, L.L.C.) | Speech transcription for Ask Quodra's voice sessions, only in workspaces whose owner turns Voice on and only where the realtime transport is configured; otherwise speech is recognised by your own browser and nothing reaches OpenAI | Your microphone's audio while a voice session is listening, streamed from your browser to OpenAI's realtime transcription session and returned as text; no deck content. Not used to train OpenAI's models under its API terms; OpenAI may retain audio for abuse monitoring for up to 30 days; Quodra keeps no audio and no transcript beyond the session | United States |
Analytics and error reporting: active only when set up#
These two providers are used only when they are set up for the Service. Analytics also needs your opt-in. Error reporting is Essential: it does not depend on your analytics choice. Hosting and API logs are separate from both. The Cookie Policy describes the two categories.
| Provider | Purpose when active | Data involved | When it runs | Region |
|---|---|---|---|---|
| PostHog (PostHog, Inc.) | Optional product analytics: a fixed list of usage and timing events from the application, the website's pricing-page events and, for accounts that opted in, the account records Quodra's API keeps | Opaque identifiers, counts, durations, fixed categories and technical context such as the browser, and the IP address a browser's events are sent from; for account records, also the plan, billing period, payment amounts, a label for the kind of user and the kind of email domain. Never the content of your work | Only where analytics is set up, and only after you opt in: in the application (its question, or Settings → Diagnostics & analytics) or on the website (its question, or Cookie settings) | United States (PostHog US Cloud) |
| Sentry (Functional Software, Inc.) | Error and crash reports from the application and Quodra's servers, with sensitive fields filtered before sending | An account identifier, the error reference, error details and technical context | Whenever error reporting is set up; Essential, so not controlled by the analytics choice | United States |
Third parties that are not subprocessors#
Three kinds of third party interact with the Service without processing personal information on Quodra's behalf:
- Content delivery for public assets. Your browser fetches typefaces from Google Fonts and the in-browser Python runtime from jsDelivr. These are direct requests from your device for public files; see the Cookie Policy for details.
- Content a presentation brings in. A page embedded in a presentation (from YouTube, Vimeo, Desmos, Observable, GeoGebra or Google Docs) or a video linked by its web address is loaded by your browser directly from its provider. Quodra allows these providers to be embedded but does not pay or instruct them.
- Integrations you bring. If you connect your own AI tool to Quodra through the Model Context Protocol, or use your own Materials Project API key, the provider behind your tool processes data under your relationship with them — Quodra does not select, pay or instruct that provider.
Questions#
Questions about this page may be submitted by email: hello@quodra.app
Product: Quodra