Subprocessors
Last updated: 07/01/2026
This page lists the third party service providers (“subprocessors”) that Auripath uses to process personal data in order to provide the Service. If you are a customer and Auripath processes personal data on your behalf (for example lead capture from your embeds), this list is provided to support transparency under our Data Processing Addendum (DPA).
1. How to Read This List
- Customer account data: data relating to your Auripath account and your use of the app.
- Customer content: text you paste or upload and generated outputs (audio, covers, related metadata).
- End user lead data: email addresses and related data submitted via your embed lead forms (if enabled).
- Usage and analytics: event data from the app or embedded player (loads, plays, progress, completions).
- Technical and security data: IP address, user agent, and logs used for security and abuse prevention.
2. Subprocessors List
| Subprocessor | Purpose | Data categories | Primary processing location |
|---|---|---|---|
| Amazon Web Services (AWS) | Hosting, storage, backups, and infrastructure for the Service | Customer account data, customer content, generated outputs, end user lead data, usage and analytics, technical and security data | United Kingdom (primary), other regions as configured |
| Paddle | Checkout, payments, subscriptions, taxes, invoicing, refunds, chargebacks (Merchant of Record) | Billing and transaction data, customer account identifiers, subscription status, support related purchase metadata | Varies by Paddle operations and providers |
| OpenAI | AI generation services (for example cover generation and PDF to audio script features) | Customer content submitted for generation, generated outputs, related metadata | Varies by provider configuration |
| ElevenLabs | Text to speech generation | Customer content submitted for speech generation, generated audio outputs, related metadata | Varies by provider configuration |
| Google Analytics | Analytics for website and app usage (where enabled) | Usage and analytics, technical and security data (for example IP-derived location, device and browser data), cookie identifiers | Varies by Google services |
| HubSpot | Marketing analytics and performance tracking (where enabled) | Usage and analytics, technical data, cookie identifiers, marketing attribution data | Varies by HubSpot services |
| Hotjar | Product analytics and user experience insights in the app (where enabled) | Usage and analytics, technical data, session identifiers, interaction data | Varies by Hotjar services |
| tawk.to | Customer support chat | Support communications, technical data, chat identifiers | Varies by tawk.to services |
| {{EMAIL_PROVIDER_NAME}} | Email delivery for service communications and marketing (if enabled) | Email address, message content, delivery metadata (opens and clicks where enabled) | {{EMAIL_PROVIDER_LOCATION}} |
3. International Transfers
Some subprocessors may process data outside the UK and EEA. Where required, Auripath uses appropriate safeguards for international transfers, such as Standard Contractual Clauses and the UK Addendum or UK International Data Transfer Agreement, and may rely on other lawful transfer mechanisms where available.
4. Updates to This List
We may update this list from time to time as our Service evolves. If we add or replace subprocessors in a way that materially impacts customers, we will update this page and may provide notice through the app or by email where appropriate.
5. Contact
Questions about subprocessors: [email protected].