Subprocessors
This page lists the companies that handle personal data in connection with DeepCube and our websites. The first two tables are the subprocessors of customer data that form Annex 3 of our Data Processing Agreement. The third lists other companies that receive data from visitors and users, as our Privacy Policy describes.
Subprocessors of customer data: AI
| Company | What it does | What it receives | Retention and training |
|---|---|---|---|
| Microsoft Corporation (Azure OpenAI Service) | Generates Tessa's answers | Prompts, images, conversation context and tool results, which can include file contents the user asked Tessa to read | Not used to train models. Microsoft may keep prompts and answers for up to 30 days to detect abuse, and authorized Microsoft staff may review content flagged as abuse, as Microsoft's documentation for the service describes. Our service is based in the US, but prompts may be processed in other Microsoft regions; we are moving to US-only processing |
We review our AI providers' terms at least once a quarter. If a provider's terms change to allow training on what we send, or to keep it longer than stated here, we stop sending it customer data within 30 days, or tell customers before continuing.
Subprocessors of customer data: other
| Company | Based in | What it does | What it receives |
|---|---|---|---|
| Microsoft Corporation (Azure) | United States | Hosting, databases, sign-in, speech, monitoring and secrets, in US regions | Everything we host in Azure |
| 84codes AB (CloudAMQP) | Sweden | Message service that carries telemetry to our servers | Customer telemetry in transit, for minutes; computer names of desktop clients |
| Stripe, Inc. | United States | Payments and invoices | Billing name and email (also our own billing records), organization number, card details (entered directly), usage counts |
| Resend, Inc. | United States | Sending account email (invitations, notices) | Recipient name and email, inviter name, names of shared items |
| Zendesk, Inc. | United States | Support chat and tickets | Name, email and messages users send |
Other companies that receive data
These receive data from visitors and users of our websites, the web app and the desktop client. They are not subprocessors of customer data under our DPA.
| Company | Based in | What for | What it receives |
|---|---|---|---|
| Trackdesk s.r.o. | Czech Republic | Crediting partners who refer customers | On visits through a partner link: a referral cookie, IP address and referrer; at subscription, the organization's billing email (being replaced with an internal number) |
| Typeform S.L. | Spain | Demo and partner request forms | Your form answers and the campaign tags in the page address |
| Google LLC | United States | Analytics on our documentation site; fonts for the web app and documentation site | Page views, cookies, IP address and browser details |
| Unity Technologies | United States | Hardware statistics from the 3D desktop client | Graphics card, processor, memory and operating system details |
Services you choose to use. Sign-in through Microsoft or Steam (Valve Corporation) is handled by that provider under its own terms. When Tessa searches the web, the search goes from your computer directly to DuckDuckGo. Video players and the Steam widget on our websites load only when you click on them and are run by their providers.
Verification
This list was checked against our code, configuration and live sites on 2026-10-19. The statement that video players and the Steam widget load only on click comes from a browser test of our marketing websites on that date.
Changes
We give at least 30 days' notice before we start using a subprocessor of customer data that is not listed here: on this page, and by email to customers who ask for it at legal@immersivefusion.com. Moving work to a company already listed, or stopping using one, is updated here when it happens.
| Date | Change |
|---|---|
| 2026-10-20 | First published list |