Sub-processors

Last updated: July 15, 2026

Codoha Ltd. ("we," "our," or "us") engages the third-party service providers ("sub-processors") listed below to help provide the Text To Table Converter Service. Each sub-processor processes Personal Data only under contract, for the limited purposes described here. Where a sub-processor is located outside the EEA, the United Kingdom, or Switzerland in a country without an EU "adequacy" decision, we rely on the European Commission's Standard Contractual Clauses (with the UK Addendum and Swiss adaptations, as applicable) and supplementary measures as our transfer safeguard.

This page is provided together with our Privacy Policy. We will update it when we add or replace a sub-processor.

Infrastructure and Google Workspace

Google (Google LLC / Google Ireland Limited)

  • Purpose: Google Workspace host integration (Docs, Sheets, Slides, Forms, Drive APIs), cloud hosting and logging (Google Cloud Platform), and AI processing via Google Gemini.
  • Data processed: account identity (email, name), the document/file content you actively process with the Add-on, and service/diagnostic logs.
  • Location: United States and other Google regions.
  • Transfer safeguard: Standard Contractual Clauses / Google's Data Processing Terms.

Vercel (Vercel, Inc.)

  • Purpose: hosting, serverless functions, and content delivery for our websites and the web-based tools suite.
  • Data processed: technical request data such as IP address, approximate location derived from IP, browser and device information, and request logs, together with any content that transits our web application while you use a feature.
  • Location: United States and other Vercel edge regions.
  • Transfer safeguard: Standard Contractual Clauses.

AI processing

OpenRouter (OpenRouter, Inc.)

  • Purpose: the AI provider we integrate with directly. OpenRouter routes each AI request to the selected model on our behalf and, in doing so, transmits the content to the underlying model provider (such as Google or OpenAI), which acts as OpenRouter's sub-processor.
  • Data processed: the content you submit to AI features (text, PDF, image, or audio) and the resulting output.
  • Location: United States.
  • Transfer safeguard: Standard Contractual Clauses.

OpenAI (OpenAI, L.L.C.)

  • Purpose: a downstream model provider that OpenRouter may route requests to for certain AI features (for example lightweight text extraction and text-to-speech). We have no direct integration with OpenAI; it is engaged as OpenRouter's sub-processor.
  • Data processed: the content you submit to AI features when a request is routed to an OpenAI model.
  • Location: United States.
  • Transfer safeguard: Standard Contractual Clauses. Content submitted via the API is not used to train OpenAI's models.

Storage, analytics, support, and billing

Supabase (Supabase, Inc.)

  • Purpose: database for items you choose to save in the tools suite, and temporary file storage for uploads (for example audio submitted for transcription).
  • Data processed: your email address, the saved items you create, and transient uploaded files (deleted promptly after processing).
  • Location: United States.
  • Transfer safeguard: Standard Contractual Clauses.

PostHog (PostHog, Inc.)

  • Purpose: product analytics, error tracking, and session replay to understand and improve how the Service is used. Non-essential analytics and session replay are activated only with your consent where required by law.
  • Data processed: usage and event data, a pseudonymous identifier and/or email, device and approximate-location data derived from IP, and interaction recordings (with input masking applied).
  • Location: United States.
  • Transfer safeguard: Standard Contractual Clauses.

Web3Forms

  • Purpose: delivers submissions from our support/contact form.
  • Data processed: your name, email address, message content, and any attachments.
  • Location: United States.
  • Transfer safeguard: Standard Contractual Clauses.

Paddle (Paddle.com Market Limited)

  • Purpose: Merchant of Record for paid plans — checkout, subscription management, payment processing, tax (VAT/sales tax) calculation and remittance, refunds, and fraud prevention.
  • Data processed: name, email, billing address, and payment details. Paddle acts as an independent controller/merchant for payment data under its own terms.
  • Location: United Kingdom / European Union.
  • Transfer safeguard: Paddle's own data-protection terms and Standard Contractual Clauses.

Questions

To ask about our sub-processors or the transfer safeguards we apply, contact support@texttotableconverter.com.

Further reading