The short version
- A sub-processor is a company showdo uses that handles customer data on showdo's behalf.
- showdo uses AI companies, a database host, file storage, email delivery and website hosting. Google and GitHub are used only if you sign in with them. PostHog is used only for people who turn on usage statistics.
- showdo sends each company only what it needs to do its job.
- Some companies are named only by type here, because the exact company depends on how showdo is set up. Ask us and we will tell you.
The full text below is what counts.
The list
Each card shows what the company does, what it receives, where it handles data and when showdo uses it.
OpenRouter
- What it does
- Passes AI requests to the company that runs the chosen AI model, and returns the answer.
- What it receives
- Whatever the AI feature sends: blurred screenshots, step text, guide text, questions to the assistant, and page details for Ask showdo. See How showdo uses AI. Nothing is sent from a workspace that has turned off "Allow AI features".
- Where
- The company is based in the United States and may handle data in other countries too.
- When it is used
- When you use an AI feature and showdo is set up to use OpenRouter. Never for a workspace that has turned AI features off.
Companies that run the AI models behind OpenRouter
- What it does
- Run the AI model that reads the request and writes the answer. Examples: Google, Anthropic, OpenAI.
- What it receives
- The same as OpenRouter above.
- Where
- Depends on the model company. Each is a large company that may handle data in several countries.
- When it is used
- When OpenRouter passes your request to them.
OpenAI
- What it does
- Makes voiceovers, works out caption timing, prepares guide text for the assistant's search, and writes or answers when showdo is set up to use OpenAI instead of OpenRouter.
- What it receives
- Narration lines as text, the computer voice audio showdo makes, guide text, and the same AI feature data as above when OpenAI is used for writing.
- Where
- The company is based in the United States and may handle data in other countries too.
- When it is used
- When you use voiceover, or when guides are made searchable, or when an AI feature runs through OpenAI. Never for a workspace that has turned AI features off.
Google Cloud (Cloud SQL)
- What it does
- Runs showdo's database.
- What it receives
- Everything stored as records: accounts, workspaces, guide and step text, activity, assistant chats and settings.
- Where
- Virginia, United States
- When it is used
- Always.
Amazon Web Services (Amazon S3)
- What it does
- Stores files (S3-compatible storage).
- What it receives
- Blurred screenshots, covers, exported videos, voiceover audio and workspace logos.
- Where
- Virginia, United States
- When it is used
- Always, unless showdo stores files on its own server.
Amazon Web Services (Amazon SES)
- What it does
- Delivers showdo's service emails.
- What it receives
- The recipient's email address, and the email: sign-in checks, password resets, invitations and notices.
- Where
- Mumbai, India
- When it is used
- Whenever showdo sends an email.
Google Cloud
- What it does
- Runs the showdo website and its servers.
- What it receives
- Everything that passes through the service, because showdo runs there.
- Where
- Virginia, United States
- When it is used
- Always.
PostHog
- What it does
- Counts which pages are opened and which buttons are pressed on the showdo website, so we can see which parts get used.
- What it receives
- Only from people who turned on "Usage statistics": which pages are opened (as the kind of page, without workspace names or guide ids in the address), which buttons and links are pressed (their label), and what was done, such as "guide published" or "video exported", with ids, counts and choices. It never receives the words, pictures or titles in your guides, what you type, or your chats. If you are signed in it also receives your account id, name and email address, and your workspace's id, name and your role, so the counts can be tied to accounts and teams.
- Where
- PostHog's United States region. The company is based in the United States.
- When it is used
- Only after a person turns on "Usage statistics" in the cookie choices. Never from showdo for Chrome, showdo for Mac or showdo for Android.
Google
- What it does
- Lets you sign in with your Google account.
- What it receives
- Your sign-in request. Google sends showdo your name, email address and profile picture.
- Where
- The company is based in the United States and may handle data in other countries too.
- When it is used
- Only if you choose Google to sign in.
GitHub
- What it does
- Lets you sign in with your GitHub account.
- What it receives
- Your sign-in request. GitHub sends showdo your name, email address and profile picture.
- Where
- The company is based in the United States and may handle data in other countries too.
- When it is used
- Only if you choose GitHub to sign in.
Not on the list
- Apple. If you narrate on a Mac, macOS turns your speech into text. showdo asks for this to happen on your Mac whenever the Mac can do it. If it cannot, macOS may use Apple's speech service under Apple's terms. Apple does not receive data from showdo.
- Advertising companies. showdo uses none. The only analytics company is PostHog, listed above.
When the list changes
We will update this page, and its date, when a company is added or replaced.
The Data Processing Addendum explains how a customer can object to a change. You can ask us any question about this list at [email protected].
Version history
- Version 1.4Added showdo for Android to the apps this page covers. Nothing else changed.
- Version 1.3Relay is now called showdo, a product of WeMakeCode (OPC) Private Limited. Nothing else changed.
- Version 1.2Added PostHog, which counts page visits and button presses for people who allow "Usage statistics".
- Version 1.1No request goes to an AI company from a workspace that has turned off "Allow AI features".
- Version 1.0First published version.