Skip to main content

    Sub-processors

    Last updated: July 9, 2026. We notify institution customers at least 30 days before changes to this list.

    Provider Purpose Data involved Location
    Supabase (on AWS) Database, authentication, file storage, application backend All platform data United States
    Resend Transactional and program email delivery Names, email addresses, message content United States
    Stripe Institution billing Billing contact and payment details United States / global
    Tremendous Creator reward redemption Creator name, email, redemption amount United States
    Sightengine Automated content moderation — content categories only (no face, age, gender, or emotion analysis); flags are reviewed by a human before any action Submitted content (media) European Union
    OpenRouter (Google Gemini and OpenAI models) Video and caption analysis (a factual summary, transcript and brief checklist for the institution's reviewers; a person makes every decision). AI drafting assistance — captions, campaign briefs, and summaries, including factual summaries of creator applications for the school's reviewers (quoted evidence against the school's own criteria). Output is for a human to review; it is not used to score, rank, or decide about any person Submitted video files, captions and campaign briefs for video analysis; prompt text, content captions and metadata submitted for drafting; creator application fields excluding name, email, gender, age, nationality, photo and ID United States / European Union
    Daily.co Video sessions and recordings Session audio/video, participant names United States
    Google (OAuth, Calendar) Sign-in and calendar integration Account identifiers, calendar availability United States / global
    Google Firebase (FCM) Mobile push notifications Device tokens, notification content United States / global
    ipinfo.io IP address geolocation for security logging IP addresses United States

    Changelog

    No changes yet.

    Questions: privacy@upperclass.app.