This page lists the third parties ("Sub-processors") that may process Personal Data on behalf of our customers when they use Disqua. It forms part of the Data Processing Agreement (Section 7). The Service is provided by:
Baby Data s.r.o.
Roháčova 188/37, 130 00 Praha 3 — Žižkov, Czech Republic
Company ID (IČO): 06956042 · VAT ID (DIČ): CZ06956042
Registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 291953
Email: privacy@disqua.com (data protection) · hello@disqua.com (general)
1. Core infrastructure
Hosting and database infrastructure
- Purpose: Application servers, storage of uploaded files, and the MySQL database server on which all Service data is stored.
- Data: All customer data stored in the Service (accounts, messages, files, tickets, logs).
- Location: European Union.
Email delivery (SMTP relay)
- Purpose: Sending transactional emails (account verification, password reset, invitations, notifications, digests) and helpdesk emails sent on behalf of customers.
- Data: Recipient email address, name, and email content.
- Location: European Union.
Stripe
- Purpose: Payment processing for subscriptions and wallet top-ups, customer billing portal, tax calculation. Payments are entered on pages hosted by Stripe; Disqua does not store full payment card details.
- Data: Name, email address, billing address, tax ID, payment details, transaction history.
- Location: European Union and United States.
2. Monitoring, analytics and notifications
OpenAnalyticsAPI
- Purpose: Cookieless page-view analytics on www.disqua.com, console.disqua.com and status.disqua.com (see the Cookie Policy).
- Data: Visited page, referrer, browser and device type, a random visitor identifier; IP addresses are anonymised.
- Location: European Union.
OpenErrorAPI
- Purpose: Error tracking for the API, console and background workers, used to detect and fix faults.
- Data: Technical error reports (stack traces, request metadata); these may contain limited identifiers such as a user ID. Sensitive fields are filtered before sending.
- Location: European Union.
OpenPushAPI
- Purpose: Delivery of web and mobile push notifications.
- Data: Push subscription identifier, notification title and short text.
- Location: European Union. Notifications are handed over to the push service of the recipient's browser or operating system (for example Google, Mozilla or Apple) for final delivery.
3. Optional features
The following Sub-processors are involved only when the corresponding feature is used.
Anthropic, PBC
- Purpose: AI features (for example summaries, reply suggestions, helpdesk triage and sentiment analysis, AI employees).
- Data: The content submitted to the AI feature (messages, ticket text) for the duration of the request.
- Location: United States.
OpenAI
- Purpose: AI features (alternative AI provider) and speech-to-text transcription of voice notes.
- Data: The content or audio submitted to the AI feature for the duration of the request.
- Location: United States.
DeepL SE
- Purpose: Machine translation of messages and helpdesk tickets when a user requests a translation.
- Data: The text to be translated.
- Location: European Union (Germany).
Bring your own key: if a workspace configures its own AI provider API key, requests for that workspace are sent to that provider under the customer's own agreement with the provider.
Integrations: connectors and integrations that a customer installs (for example GitHub, Jira, HubSpot or a calendar provider) exchange data with the chosen third-party service on the customer's instruction. Those services are selected by the customer and are not Sub-processors engaged by Disqua.
4. International transfers
Where a Sub-processor processes Personal Data outside the European Economic Area, the transfer is made on the basis of an adequacy decision of the European Commission or of standard contractual clauses, where required.
5. Changes
We will update this page before engaging a new Sub-processor and notify customers in accordance with Section 7 of the Data Processing Agreement. Questions about Sub-processors can be sent to privacy@disqua.com.