Sub-processors
Last updated: July 9, 2026. We notify institution customers at least 30 days before changes to this list.
| Provider | Purpose | Data involved | Location |
|---|---|---|---|
| Supabase (on AWS) | Database, authentication, file storage, application backend | All platform data | United States |
| Resend | Transactional and program email delivery | Names, email addresses, message content | United States |
| Stripe | Institution billing | Billing contact and payment details | United States / global |
| Tremendous | Creator reward redemption | Creator name, email, redemption amount | United States |
| Sightengine | Automated content moderation — content categories only (no face, age, gender, or emotion analysis); flags are reviewed by a human before any action | Submitted content (media) | European Union |
| Lovable AI Gateway (Google Gemini models) | AI drafting assistance — captions, campaign briefs, and summaries. Output is drafted for a human to review and edit; it is not used to score, rank, or decide about any person | Prompt text, content captions and metadata submitted for drafting | United States / European Union |
| Daily.co | Video sessions and recordings | Session audio/video, participant names | United States |
| Google (OAuth, Calendar) | Sign-in and calendar integration | Account identifiers, calendar availability | United States / global |
| Google Firebase (FCM) | Mobile push notifications | Device tokens, notification content | United States / global |
Changelog
No changes yet.
Questions: privacy@upperclass.app.