Service Providers & Subprocessors

This page lists the primary third-party service providers visible in the current ClassMate codebase. Some providers are always used to operate the service; others are used only when a user enables an optional feature.

Last updated: April 15, 2026

Supabase

Authentication, database, object storage, and server-side functions.

Data categories

Account records, profile data, study content, community content, uploaded files, integration tokens, and app data stored by the product.

Vercel

Website hosting, API hosting, content delivery, and limited performance analytics through Speed Insights.

Data categories

Operational logs, request metadata, performance telemetry, and hosted application delivery data.

Stripe

Hosted checkout, billing portal, and subscription management for paid web plans.

Data categories

Billing metadata such as customer and subscription identifiers. Payment card entry is generally handled inside Stripe-hosted flows.

Google APIs

Google sign-in and optional Google Calendar, Google Drive, and Gemini-powered study-guide features.

Data categories

Sign-in metadata and only the Google account or content data needed for features the user chooses to connect or request.

Canvas

Optional user-directed LMS connection for users who connect their Canvas account.

Data categories

Canvas tokens and selected course, assignment, grade, or module data retrieved to power the Canvas feature.

Jitsi Meet

Optional browser-based audio or video rooms for community call features.

Data categories

Call session metadata and media-session data only when a user joins a live call feature.

This list reflects providers identifiable from the current repository and deployment flow. District reviewers who need contracting, security questionnaires, or DPA review materials can email hello@classmate.plus and can review the district DPA summary at /dpa.html.