Version 2026-10-12 (last updated)
DRAFT — requires review by legal counsel before launch. Confirm each vendor, region and data processing agreement before publishing.
Subprocessors
Last updated: [EFFECTIVE DATE]
RythmoLabs uses the following third parties to provide the service. Each may process personal information only to provide its service to us, under written data protection terms. Studios are notified of changes as described in the Studio Data Processing Addendum.
| Subprocessor | Purpose | Personal information processed | Location |
|---|---|---|---|
| Vercel Inc. | Application hosting, serverless functions, edge network | All data in transit through the application; request logs (IP address, user agent) | United States |
| Vercel Blob (Vercel Inc.) | File storage | Signed waiver PDFs, signature images, profile and child photos | United States |
| Neon Inc. | Managed Postgres database (via Vercel Marketplace) | All account, family, student, billing and messaging records | United States [CONFIRM REGION] |
| Stripe, Inc. | Payment processing (Stripe Connect for studio payments, Stripe Billing for studio subscriptions) | Payer name, email, payment card or bank details, amounts, billing address | United States |
| Twilio Inc. | SMS messaging | Phone numbers, SMS message content, opt-out status | United States |
| [EMAIL PROVIDER] | Transactional email delivery (verification codes, password resets, notices, announcements) | Recipient name and email address, message content | United States [CONFIRM] |
| Upstash, Inc. | Rate limiting (via Vercel Marketplace) | Short-lived counters keyed by IP address, email address or user ID | United States [CONFIRM REGION] |
| Rollbar, Inc. | Error monitoring (via Vercel Marketplace) | Internal user ID, anonymized IP address, browser details, error context (no request bodies, names or emails) | United States |
| Browser push services (Google, Apple, Mozilla, Microsoft) | Delivering web push notifications to devices that opted in | Push endpoint and encrypted notification content | Varies by provider |
| GitHub, Inc. | Optional sign-in with GitHub (OAuth), used by staff | Name, email and GitHub account ID when a user chooses GitHub sign-in | United States |