Our Third Party Processors

Our Third Party Processors

At Apolitical, we recognise that giving our members full transparency over how their data is processed and by whom is key to building trust with our community. You can find a list of the third party processors with whom we may share your data below. Please note that this list is subject to change both in terms of Third Parties we use to process your data, as well as where those Third Parties store data. We endeavour to maintain this page with accurate information so far as is reasonable possible and periodically review the contents. If you have any questions about our use of these processors, please contact our Data Protection Officer at dpo@apolitical.co

Processor
Purpose
Personal data shared
Data storage location
Transfer mechanism
Processor’s privacy policy
Airtable
When you agree to contribute an article, we invite you and our editors to access Airtable to manage the creation, editing and publishing of user generated content types.
•Profile information: Name, email address, profile picture if provided. • Content information: text, files, documents, images and links
US
Standard Contractual Clauses, embedded within a signed Data Processing Addendum
Auth0
For authentication and account security
•Profile information: Name, email address • Password information
EU (Germany and Ireland)
EU–US Data Privacy Framework
api.video
To host video recordings of our live events
• Audio and video data shared during the course of an Apolitical Live event
EU (Netherlands and France)
EU–US Data Privacy Framework
Calendly
When you agree to participate in a user research interview with our team, you may be asked to use Calendly to schedule meetings
•Profile information: Name, phone number and email address. • Information about the meeting and calendar information to check busy/free status
US
Standard Contractual Clauses, embedded within a Data Processing Addendum
Google Workspace (formerly G-Suite)
To track and manage platform content and user information
•Profile information: Name, email address employment information including department and job title. •If you agree to participate in a survey, we store responses on Google Workspace, as well as details about you if it is non-anonymous.
EU (Germany and Ireland) and the UK
Standard Contractual Clauses, embedded within a Data Processing Addendum
Google Cloud Platform
To manage and analyse data about platform usage
•Profile information: Name, email address employment information including department and job title. •IP address and location information
EU (Germany and Ireland) and the UK
Standard Contractual Clauses, embedded within a Data Processing Addendum
HubSpot
Our Customer relationship management tool; we use HubSpot to carry out engagement and marketing email outreach.
•Profile information: name, email address, phone number, geographic location, employment information including department and job title. •Content information: email content and replies
EU (Germany)
A Data Processing Addendum
Kickbox
Our email verification tool
•Email address. Please note, names and job information may be included in email addresses processed by Kickbox.
EU (Ireland)
A Data Processing Addendum
LangChain
To power our AI Course Assistant
• Information contained in user inputs to the AI Assistant tool. • Unique user ID (pseudonymised)
US
Standard Contractual Clauses, embedded within a Data Processing Addendum
LinkedIn
To advertise Apolitical content and offer live event sign ups
•Profile information: name, email address, phone number, geographic location, employment information including department and job title. • Usage information- IP address, device and browser data, and location information •Content: Any text, posts, messages, interactions and sign ups provided to the service
US
Standard Contractual Clauses
MS Teams
To host social learning opportunities part of our courses
•Profile information: name, email address, phone number. •Content: meetings, chats, voicemails, shared files, recordings and transcripts
UK
Standard Contractual Clauses, embedded within a Data Processing Addendum
Microsoft
To analyse, typically aggregated, user data. To perform our contractual obligations
•Profile information: name, email address, job title and department. • Analytics information: data about course onboarding, engagement and completion
UK
Standard Contractual Clauses, embedded within a Data Processing Addendum
Neo4J
To power the Connections feature, which Apolitical members to connect with one another by revealing email details
• Profile information: name, email address, phone number, geographic location, employment information including department and job title.
UK
EU-US Privacy Shield
Notion
To host Apolitical’s information repository. Note: we are going through the process of removing user PII from Notion
•Profile information: name, email address, phone number, geographic location, employment information including department and job title. •Content information: content, including your thoughts, feedback and opinions, you provide to us through surveys and user interviews.
US
Standard Contractual Clauses, embedded within a Data Processing Addendum
OpenAI
We leverage OpenAI’s ChatGPT 4 in our AI policy search tool, to generate answers
• OpenAI only processes data you share in your search query. This means that whilst OpenAI does not require personal data to function, it will collect any information about yourself that you have provided • Apolitical may process anonymised data with OpenAI. We take great care to ensure that information processed by OpenAI does not contain any sensitive data, or data that can be used to identify an individual
US
Standard Contractual Clauses, embedded within a Data Processing Addendum
OtterAI
If you agree to participate in a user research interview, we may use OtterAI, a AI/ machine learning transcription tool, to record the discussion within the interview. We ask for your explicit consent prior to recording user interviews
•Profile information: name, email address, phone number. •Content information: Audio recordings, and any text, images or videos uploaded to the app in use of the service.
US, Israel
Standard Contractual Clauses, embedded in the Privacy Policy
Padlet
We use Padlet as a learning design tool to deliver courses. We use Padlet to facilitate social learning in courses, particularly for sharing documents, guides and resources with other course participants. Please ensure you do not share any classified information during your use of Padlet.
•Profile information: name, email address, phone number, optionally a photo and short bio. •Content information: content uploaded to Padlet during use of the app, including text, files, images, maps, audio, links and documents.
US
Standard Contractual Clauses, embedded within a Data Processing Addendum
Pinecone
To power our AI Course Assistant
Pinecone processes data that you input into the chat function of our AI Course Assistant
US
Standard Contractual Clauses, embedded within a Data Processing Addendum
Quiz Maker
To participate in quizzes and surveys as part of an Apolitical course. Please note, Quiz maker does not require any personally identifying information about our users. Surveys carried out on Quiz Maker are anonymous, but results may be aggregated.
•Content information: responses provided in participation of quizzes and surveys.
US
N/A
Reply.io
To carry out multichannel sales engagement via email and LinkedIn.
•Profile information: name, email address, phone number, geographic location, employment information including department and job title.
US
Standard Contractual Clauses, embedded within a signed Data Processing Addendum
SeaTable
When you agree to contribute an article, we invite you and our editors to access Airtable to manage the creation, editing and publishing of user generated content types.
•Profile information: Name, email address, profile picture if provided. • Content information: text, files, documents, images and links
EU (Germany)
Standard Contractual Clauses, embedded within a signed Data Processing Addendum
SendGrid
To carry out marketing emails
•Profile information: name, email address
US
Standard Contractual Clauses, embedded within a Data Processing Addendum; Binding Corporate Rules
Sli.do
To embed user interaction and engagement in our courses in the form of surveys and quizzes
•Profile data: name, email and employment information. •Customer data: questions, poll answers, ideas, chats shared by participants and non-anonymous individuals.
EU (Ireland)
Binding Corporate Rules
Stripe
To collect payment or issue refunds for paid products on our platform
•Transactional data: name, email, billing address, payment method, merchant and location, date of purchase, information entered into a checkout form, even if the checkout is not completed
EU and US
Standard Contractual Clauses, embedded within a signed Data Processing Addendum
Survey Sparrow
To embed user interaction and engagement in our courses in the form of surveys and quizzes
• Profile data: name, email and employment information. •Customer data: questions, poll answers, ideas, chats shared by participants
EU (Germany and Ireland)
Standard Contractual Clauses, embedded within a Data Processing Addendum
ThoughtSpot
To monitor and analyse activity on our platform from users
• User credentials: name, employer, title, email address. • Demographic information such as race, gender and ethnicity (when consent is provided for us to collect this information) • Online and device identifiers such as IP address, cookies and identifiers
EU (Germany and Ireland)
Standard Contractual Clauses, embedded within a signed Data Processing Addendum
Workable
To carry out recruitment and hiring activity
• Profile data: name, email, address • Content provided by you as part of your application, including your job history, professional and educational references
UK and EU (Greece)
Standard Contractual Clauses, embedded within a Data Processing Addendum
Vimeo
To host video recordings of our live events
• Video content captured as part of a live event recording, such as your name, image, voice and chat
EU
Standard Contractual Clauses, embedded within a signed Data Processing Addendum
YouTube
On occasion, to host video recordings of live events. We most commonly will use Vimeo, however may privately host video recordings for cohorts will access issues for Vimeo
• Profile information: if you are logged in, YouTube will collect profile information such as name, email, address, profile. • Usage information: about apps, browsers and devices used including unique identifiers, settings and network. • Activity information: including videos watched, voice and audio information, Chrome browsing history, views and interactions with content and ads
US/ Worldwide
Standard Contractual Clauses, embedded within a Data Processing Addendum
Zapier
To automate and integrate our workflows
• To integrate applications which process user information. Zapier may process information held about you on such applications, such as your profile information or content contribution
US
Standard Contractual Clauses, embedded within a signed Data Processing Addendum
Zendesk
To provide customer support
• Profile data: name, email and employment information. •Information you provide when you reach out to our customer support team (concierge@apolitical.co) including the nature of your issue, and any communication and content providing submitted to resolve your issue
EU (ireland)
Standard Contractual Clauses, embedded within a signed Data Processing Addendum
ZInc
To carry out background checks in line with our government contractual agreements with candidates and subcontractors
• Profile data: name, email, phone number, address • Content required to carry out checks including a scan of your ID, nationality and immigration status documentation, educational and employment references, and a criminal record checm
EU
International Data Transfer Agreement and Addendum
Zoom
To deliver online live events and webinars. We often record live events which take place on Zoom and share them on the Apolitical platform
• Information collected by engaging in Apolitical live events such as name, email, image, voice and chat data.
EU
Standard Contractual Clauses, embedded within a signed Data Processing Addendum