§ 01
About this list
We use the third-party services below to deliver lessonu. Each one processes a defined slice of customer data on our behalf under written terms. We give our customers 30 days notice — via email and an update to this page — before adding a new subprocessor.
§ 02
Current subprocessors
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | Postgres database, authentication, file storage | All customer data, user PII, lesson notes, uploaded files |
| Stripe | Payments, subscriptions, invoicing | Customer name, email, billing address, transaction history |
| Resend | Transactional and broadcast email | Recipient email, name (for personalisation), email content |
| LiveKit Cloud | Real-time video and audio for classroom sessions | Session participants, audio/video streams (not stored by default) |
| Vercel | Hosting, edge network, build and deploy | All HTTP traffic (incl. auth tokens), runtime logs |
| Cloudflare Turnstile | Bot and abuse prevention on public forms | IP address, user-agent, behavioural signals |
| VirusTotal | Malware scanning of uploaded files | File hash and filename of uploaded resources |
| Inngest | Background job queue (reminders, scheduled tasks) | Event payloads — primarily lesson IDs and recipient emails |
| Upstash Redis | Rate-limit counters | IP address, action type |
| Sentry | Error tracking and breadcrumbs | Error messages, stack traces, user ID (no email) |
§ 03
Contact
Questions about this list, or to request notification of future changes by email, contact lessonu.team@gmail.com.