Subprocessors

Effective date: October 7, 2026.

What a subprocessor is, and what it is not

A subprocessor is a third party that handles data on our behalf in the course of running the business. Naming them is how you check our claims rather than taking them on faith.

None of the services below ever receives your audio or your transcripts. That is not a policy we could quietly change; it is a consequence of where the work happens. Speech-to-text runs locally on your Mac using Whisper or NVIDIA Parakeet, so there is no point in the pipeline at which a recording is handed to anyone.

Buying and activating a licence

Stripe processes payment and calculates sales tax when you buy. Stripe receives your email address, card details, and billing address; the billing address is what determines any tax due. We never receive or store your full card number. Through our Stripe account we can see your email, billing details, and the resulting tax and accounting records. Stripe's privacy policy.

Keygen (Keygen LLC) issues and manages your licence key, and holds the authoritative record of which devices a licence has been activated on. It receives your licence key and, for each device you activate, a fingerprint, a name, and a platform label. A licensed copy of the app re-checks its licence with Keygen periodically, which is why a permanently disconnected machine is not the intended setup. Keygen's privacy policy.

Resend (Plus Five Five, Inc.) delivers the transactional email we send you: your licence key after purchase, and a refund confirmation if you are refunded. It receives your email address and the contents of those messages. We do not use Resend for marketing email or newsletters, and we do not send you messages you did not start. Resend's privacy policy.

Getting the app, and reading this website

Apple (Apple Inc.) notarizes the application, which is the check macOS performs before it will run software from an identified developer. Notarization and the Gatekeeper check are between Apple and your Mac; we do not receive a report of who installed what. Apple's privacy policy.

Cloudflare (Cloudflare, Inc.) hosts whisprdesk.com and serves every page. In delivering a page to your browser, Cloudflare's edge processes ordinary connection metadata such as your IP address, user agent, and the path you requested. We also run one Cloudflare product on the site, Web Analytics, which is a privacy-first visit counter: it sets no cookies, does not fingerprint visitors, and gives us aggregate counts rather than profiles. It is the reason we do not claim this website is free of analytics. Cloudflare's privacy policy.

Only if you configure it: your own AI provider

WhisprDesk can optionally tidy up a transcript using an AI model. That step is off until you enter an API key, and when you do, the request goes from your Mac directly to the provider on your own account. We are not in the path and we do not see the text.

Because the key and the account are yours, the provider is your subprocessor rather than ours. Supported providers for cleanup are OpenAI, Anthropic, and Google. The app can also be switched to use a cloud model for transcription itself, which is off by default and is the only configuration in which your audio leaves your Mac. In that mode the provider's own terms and privacy policy apply to what you send.

Updates to this page

We update this page when the list changes. The effective date above reflects the most recent version. If we ever add a subprocessor that receives audio or transcripts, we will say so here and on our privacy page before the change ships, not after.

Changelog

• 2026-10-07: First version of this page. No change to practice: every service listed was already named on the privacy page, which remains the authoritative description of what we collect and why. This page adds the legal entity behind each service, what specifically it receives, and a link to its own privacy policy, so the list can be checked rather than trusted.