Loading...
The companies that process personal data on our behalf to run EducationPals, what each one does, and where.
Last updated · Version 1.0
To run EducationPals we rely on a small number of service providers ("sub-processors"). Each one processes personal data only to provide its service to us, under a written agreement. This page is the current list our Privacy Policy refers to. For the full picture of what we collect and why, read the Privacy Policy; for team and business customers, our Data Processing Addendum incorporates this list.
| Provider | What it does for us | Personal data it handles | Location |
|---|---|---|---|
| Amazon Web Services, Inc. | Hosting the website and app, application servers and APIs, databases, file storage, content delivery, queues, logs and backups | All account and learning data, material you upload for the tutor, help requests | United States (Oregon, us-west-2) |
| Amazon Web Services, Inc. — Amazon SES | Sending account, learning and service emails | Email address, name, the content of the email | United States (Oregon) |
| Clerk, Inc. | Sign-in, accounts and sessions, two-factor authentication, team organisations; bot protection on sign-up (Cloudflare Turnstile, operated through Clerk) | Email address, name, profile image, sign-in method, session and device details, IP address | United States |
| Stripe, Inc. | Payments, subscriptions, invoices and the billing portal. Card details are entered directly into Stripe and never reach our servers | Email address, name, billing details, payment card details (held by Stripe), account and team identifiers | United States |
| Slack Technologies, LLC | Notifying EducationPals staff when you send a help request or reply to one | An excerpt of the request, its subject, the page it came from, your account identifier | United States |
| Provider | What it does for us | Personal data it handles | Location |
|---|---|---|---|
| Amazon Web Services, Inc. — Amazon Bedrock | Running the AI models behind Atlas (the tutor), answer grading, tutor memory and help answers. The models (by Anthropic, OpenAI and Cohere) are hosted by AWS inside Bedrock; those model makers do not receive your data through Bedrock | Your messages to the tutor, the lesson you are on, the learner profile you confirmed, excerpts of material you uploaded, answers to be graded | United States (AWS US regions) |
| Amazon Web Services, Inc. — Amazon Polly | Reading lessons aloud | None — lesson text only | United States (Oregon) |
| OpenRouter, Inc. | A back-up route to AI models (from OpenAI or Anthropic) used only when Bedrock cannot answer. Every request is sent with the provider's data collection turned off | The same tutor request as above, when the back-up route is used | United States; the model provider is chosen per request |
Before a tutor question is sent to a model, common identifiers — email addresses, phone numbers, card numbers and similar — are removed from it. None of these providers may use your data to train their models. Our AI Policy explains what the tutor sends, keeps and does not do.
These run in your browser and depend on the choices you make in our cookie banner or in Settings › Privacy, as our Cookie Policy describes. They do not receive your tutor conversations, notes or course work.
| Provider | What it does for us | Personal data it handles | Location |
|---|---|---|---|
| PostHog, Inc. | Product analytics, and session replay for signed-in learners with all text and form inputs masked | Account identifier, pages and events, device and browser details, IP address | United States |
| Google LLC | Google Analytics and Google Tag Manager (analytics); Google Ads conversion measurement (advertising) | Cookie identifiers, pages and events, device details, IP address; your account identifier for analytics | United States and global |
| Meta Platforms, Inc. | Meta Pixel — measuring our advertising | Cookie identifiers, events, device details, IP address | United States and global |
| LinkedIn Corporation | LinkedIn Insight Tag — measuring our advertising | Cookie identifiers, page views, device details, IP address | United States and global |
| TikTok | TikTok Pixel — measuring our advertising | Cookie identifiers, events, device details, IP address | Global |
Some lesson features load directly from another provider. When you use them, that provider receives the data the feature needs:
| Provider | What it does for us | Personal data it handles | Location |
|---|---|---|---|
| LiveCodes (livecodes.io) | The in-lesson code playground | The code you type in the playground, IP address and browser details | Not specified by the provider |
| Google LLC — Google Fonts | Typefaces on some course cover images | IP address and browser details, as part of loading the font | Global |
We store and process personal data in the United States. Our own systems run in AWS's Oregon region (us-west-2). AI model requests can be served from any AWS region in the United States. Where data leaves the EU, EEA, UK or Switzerland, the safeguards described in the Privacy Policy's "International Data Transfers" section apply.
We update this page before a new sub-processor starts processing personal data for us, and the date and version at the top change with every update. Team and business customers who have our Data Processing Addendum receive notice of changes as section 4 of that addendum describes, and may object.
Questions about our sub-processors, or a request for more detail about a provider: privacy@educationpals.ai.