Effective date: October 2, 2026
Talk and Comment LLC ("Talk and Comment", "TAC", "we", "us") uses service providers to deliver the Talk and Comment website, web app, and Chrome Extension. Each provider processes data on our behalf for the purpose described below and subject to applicable contractual data-protection obligations.
This is a versioned list of service providers.
Service providers
| Provider | Purpose | Data processed | Location / notes |
|---|---|---|---|
| DigitalOcean, LLC | Application hosting and managed database | Account, application, recording metadata, stored transcripts, summaries, suggested titles, and translations | United States; encryption at rest and in transit |
| Amazon Web Services, Inc. | Audio storage and content delivery; AI processing for the outputs of the AI features enabled on the account: transcripts and, where enabled, summaries and suggested titles for each recording, and translations you request | Audio recordings, delivery metadata, and audio and text submitted to produce those outputs | United States; AI inputs are used only to produce those outputs, kept only as long as needed to return the results, and not used to train or improve AI models |
| Cloudflare, Inc. | Network security and content delivery | IP address and request metadata; content in transit | Data in transit may pass through Cloudflare's global network; stored data and AI processing remain in the United States |
| PostHog, Inc. | Product analytics | Pseudonymous product and reliability events | United States; TAC excludes recording and transcript content |
| Google LLC (Google Analytics) | Aggregate website analytics | Pseudonymous website usage and device data | United States; no recording or transcript content intentionally sent |
| Functional Software, Inc. (Sentry) | Error monitoring | Filtered diagnostics and request context | United States; no session replay for student content |
| ActiveCampaign, LLC (Postmark) | Transactional email | Account-holder email address and message delivery metadata | United States |
| Stripe, Inc. | Payment processing | Billing and payment data submitted to Stripe | United States; TAC does not store card numbers |
How AI processing is authorized
AI is a paid feature. A paid account belongs to an adult or is managed by a district, school, or team. AI processing uses Amazon Web Services, Inc. For a school or district that has a signed agreement with a later start date, the change takes effect on the date in that agreement. TAC-hosted processing is no longer available after the applicable cutover. It occurs only when a district, school, or team decides to enable it. Only a district, school, or team setting can enable AI, including transcription, for student accounts. Without that setting, no AI processing occurs for student accounts. No separate individual-consent route enables AI for student accounts. Amazon Web Services, Inc. processes audio and text in the United States only to produce the outputs for the AI features enabled on the account: transcripts and, where enabled, summaries and suggested titles for each recording, and translations you request. It keeps AI inputs only as long as needed to return the results and does not use them to train or improve AI models. Service and model detail is available to schools on request under their agreement.
User-selected independent services
Google sign-in is an optional identity-provider relationship. When a user chooses Google sign-in, Google processes the sign-in under its own terms and TAC receives the profile information the user authorizes.
Changes and education notice
We post changes to this page at least 30 days before they take effect and email the DPA notice contacts on file for each educational agency on the same day. Email [email protected] to be added to change notices. Listing a provider here does not replace a required DPA amendment or administrator approval.
Document history
| Date | Change |
|---|---|
| September 22, 2026 | Consolidated the Amazon Web Services, Inc. disclosure and stated the paid-account rule, personal-account consent, school-and-district decision, and that AI processing with Amazon Web Services, Inc. does not begin before October 22, 2026 for school and district accounts; it also states the student setting, requested AI outputs, United States processing, limited retention, and no-model-training commitment. |
| August 16, 2026 | Published the canonical list. |
Contact
Email [email protected]. For education privacy questions, include "Education Privacy" in the subject line.