Art. 30 GDPR — Last updated: May 3, 2026
This record documents all processing activities carried out by Resonant. For our full privacy policy, see Privacy Policy.
Data Controller: Thomas Schlossmacher
Business form: Individual entrepreneur (Einzelunternehmer)
Country: Austria
Contact: team@onresonant.com
Data categories
Email, name, profile picture (from OAuth provider)
Data subjects
Pro users with accounts
Legal basis
Contract performance (Art. 6(1)(b))
Recipients
Convex (database)
Retention
Duration of account; deleted on request
International transfers
USA (Convex) — SCCs
Data categories
Email, subscription status, plan ID
Data subjects
Pro subscribers
Legal basis
Contract performance (Art. 6(1)(b))
Recipients
Polar (payment processor), Convex
Retention
Duration of subscription + legal retention periods
International transfers
USA (Polar, Convex) — SCCs
Data categories
Transcript text, window title, dictionary terms, style hints
Data subjects
Pro users with cloud cleanup enabled
Legal basis
Contract performance (Art. 6(1)(b))
Recipients
Groq (Zero Data Retention)
Retention
Not stored by Groq (ZDR)
International transfers
USA (Groq) — SCCs
Data categories
Short correction snippets (≤120 chars), per-app category
Data subjects
Pro users
Legal basis
Contract performance (Art. 6(1)(b))
Recipients
Convex (database)
Retention
Duration of account; deleted on account deletion
International transfers
USA (Convex) — SCCs
Data categories
Weekly word count, dictation count
Data subjects
All users with accounts
Legal basis
Contract performance (Art. 6(1)(b))
Recipients
Convex (database)
Retention
Rolling weekly windows
International transfers
USA (Convex) — SCCs
Data categories
Feature usage events, word counts (no transcript content)
Data subjects
Users who opt in
Legal basis
Consent (Art. 6(1)(a))
Recipients
PostHog (EU-hosted)
Retention
PostHog default retention
International transfers
EU (Frankfurt) — no international transfer
Data categories
Stack traces, OS/app version, hashed email. PII scrubbed before transmission.
Data subjects
Users with crash diagnostics enabled (disabled in HIPAA mode)
Legal basis
Legitimate interest (Art. 6(1)(f))
Recipients
Sentry
Retention
Sentry default (90 days)
International transfers
USA (Sentry) — SCCs + DPF
Data categories
Name, email, referral source, email preference
Data subjects
Waitlist signups
Legal basis
Consent (Art. 6(1)(a))
Recipients
Convex (database), Resend (transactional email)
Retention
Until user requests removal
International transfers
USA (Convex, Resend) — SCCs
Data categories
Meeting title, summary, action items, attendees
Data subjects
Pro users who share recaps
Legal basis
Contract performance (Art. 6(1)(b))
Recipients
Convex (database)
Retention
User-controlled; expiring share links
International transfers
USA (Convex) — SCCs