About This List
A sub-processor is a third party that Cyberdune Technologies Private Limited engages and that may process personal data in customer content on a customer’s behalf. This page sets out the categories referred to in the data processing addendum. The same providers also process personal data for which we are the controller, as described in the privacy policy.
Where a provider is outside the UK or the European Economic Area, the transfer mechanism is transfer mechanismsTBC (to be confirmed).
Categories of Sub-Processor
| Category | Purpose | Data processed |
|---|---|---|
| Cloud hosting and delivery | Running the application and delivering it securely to your browser. | Requests and responses in transit, including IP address and browser details, and server logs. |
| Managed database, sign-in and storage | Storing the service's data, handling account sign-in, and storing files. | All data held in the service: accounts, team details, websites, customer content, generated images, Vault files, encrypted credentials, activity logs and enquiries. |
| AI model provider | The AI features: reading a website at setup, planning topics, writing and checking articles, generating images, page audits, the optional fact check, web research, AI visibility answers and the free preview. | Website text and brand details, brand rules, Vault extracts, Search Console queries and page figures, drafts, tracked questions and answers, and web search terms. |
| Transactional email | Sending service emails: the “workspace ready” email, team invitations, and notifications of website enquiries to our own team. | Recipient email address and the message content (for example, your name, workspace or website name, and an invitation link). |
Under the data processing addendum, customers can request the name, location and transfer safeguards of each provider from support@docket.ltd.
How AI Providers Handle Your Content
Docket does not train any AI model, and does not use customer content to train one. Our AI provider processes content only to return output to Docket, and its terms state that, by default, it does not use that data to train its models. It may keep inputs and outputs for a limited period under its own retention policy, for example to detect abuse.
Development and Support
Docket is built and operated by Cyberdune Technologies Private Limited, based in Mumbai, India. It is the company that provides the service and is party to the data processing addendum, not a third party, so it is not a sub-processor and is not listed as one. Its own staff who develop and support Docket are bound by the confidentiality and access commitments in the DPA and on the security page.
Services You Connect
These services are used only when a customer chooses to connect them, under the customer’s own account and agreement with the provider. Docket accesses them at the customer’s direction. They are third parties chosen by the customer rather than sub-processors engaged by Docket, but we list them so the flow of data is clear.
- Google Search Console and Google Analytics APIs. Docket reads reports with read-only permissions (
webmasters.readonlyandanalytics.readonly, plusopenidanduserinfo.emailto identify the connected account). Docket sends Google the request and your access token, and receives aggregated search and traffic figures. - Google sign-in. If you choose to sign in with Google, Google shares your name, email address and profile photo.
- Your WordPress site. When a person publishes, Docket sends the article, its images, excerpt, categories, tags, structured data and SEO plugin fields to your site using the application password you provided.
- Your own website and other public web pages. Docket reads pages you point it to, such as your website at setup, pages for audits and Vault links.
Services Used by Our Website
None beyond the hosting described above. Fonts are served from Docket’s own servers, so loading a page sends nothing to Google Fonts or any other font provider. See the cookie policy.
What We Do Not Use
- No analytics, advertising or tracking services, on the website or in the app.
- No payment processor at present.
Changes to This List
Before a new sub-processor starts processing customer personal data, we will tell account owners by email or in the product at least sub-processor notice periodTBC (to be confirmed) in advance, and update this page. You may object on reasonable data protection grounds, as set out in the data processing addendum.
Questions about any entry, or requests for copies of the relevant safeguards: support@docket.ltd.
Questions about this document? Write to support@docket.ltd and a person will answer.