Legal · Privacy

Subprocessors

PollSlide Technologies LLC · Last updated:

🌐 This page has been translated for your convenience. If the translation and the English version differ, the English version governs.

To provide PollSlide, we engage a small number of trusted third-party companies ("subprocessors") that process personal data on our behalf. This page lists them, what they do, and where processing takes place. It supports the transparency commitments in our Privacy Policy and our Data Processing Agreement (DPA), and satisfies our obligation under Article 28(2) & (4) GDPR to keep customers informed about the subprocessors we use.

Want to be told before this list changes? Business customers can subscribe to subprocessor-change notices by emailing help@pollslide.com with the subject "Subprocessor change notifications". We aim to give at least 30 days' advance notice of a new subprocessor, during which you may object on reasonable data-protection grounds.

Infrastructure & core service

Subprocessor	Purpose	Data processed	Processing location
Google / Firebase (Google LLC)	Primary application database, real-time sync, authentication and hosting of poll/session data.	Account email, session & response data, presenter content, authentication tokens.	United States (Google Cloud), with EU Standard Contractual Clauses.
Vercel (Vercel Inc.)	Web hosting, serverless API functions and content delivery for pollslide.com and app.pollslide.com.	Request metadata, IP address (transient), API payloads in transit.	United States / global edge network; SCCs in place.
Stripe (Stripe, Inc.)	Subscription billing and payment processing.	Billing name, email, and payment details (card data handled directly by Stripe — PollSlide never sees full card numbers).	United States / EU; PCI-DSS Level 1; SCCs in place.
Resend (Resend, Inc.)	Transactional email delivery (receipts, notifications, invites, survey/quiz share links).	Recipient email address and message content.	United States; SCCs in place.

AI features (Polly)

These providers are used only when a presenter chooses to use an AI feature (for example, generating draft questions or summarising responses). Prompts and uploaded documents are sent to return a result and are not used by these providers to train foundation models. Where feasible, generation runs on our own local models first; the providers below are used for cloud generation and fallback.

Subprocessor	Purpose	Data processed	Processing location
OpenAI (OpenAI, L.L.C.)	Cloud text generation for AI question drafting and response insights (fallback / cloud tier).	The prompt text and any document text a presenter submits to Polly. No audience personal data is sent unless the presenter includes it in a prompt.	United States; API data not used for model training; SCCs in place.
Anthropic (Anthropic PBC)	Alternate/cloud text generation for AI drafting and insights.	Prompt and submitted document text as above.	United States; API data not used for model training; SCCs in place.
fal.ai (Features and Labels, Inc.)	AI image generation for slide/background visuals when requested by a presenter.	The image prompt text submitted by the presenter.	United States; SCCs in place.

Notes

We do not sell personal data and we do not use audience responses to train AI models.
All subprocessors are engaged under written data-protection terms consistent with Article 28 GDPR, including appropriate transfer safeguards (Standard Contractual Clauses) for processing outside the EEA/UK.
This list covers subprocessors that process personal data. Purely internal tools that do not process customer personal data are not listed.
Changes are recorded in our internal compliance log and, for subscribers, sent by email in advance as described above.

Questions about this list or our data practices: help@pollslide.com.