Subprocessors
This page lists the third-party subprocessors we use to operate, secure, and improve Zahan. We update this list as vendors change.
1. Subprocessor List
Each vendor below processes data on our behalf. The table summarizes the core service, data processed, and where processing takes place.
| Vendor | Service | Data Processed | Location | Privacy Policy |
|---|---|---|---|---|
| Supabase | Database, Authentication | User accounts, quiz data | US/EU | View policy |
| Google (Gemini) | AI Content Generation | Quiz prompts | US | View policy |
| Vercel | Hosting, Analytics | Usage metrics | US | View policy |
| Resend | Email Delivery | Email addresses, names | US | View policy |
Supabase
Service: Database, Authentication
Data Processed: User accounts, quiz data
Location: US/EU
Privacy Policy: View policy
Google (Gemini)
Vercel
Resend
Service: Email Delivery
Data Processed: Email addresses, names
Location: US
Privacy Policy: View policy
2. Additional Information
For transparency, we include the type of data processed, the purpose of processing, data residency, and links to privacy and DPA documentation when available.
Supabase
- Type of data processed
- User account data, quiz content
- Purpose of processing
- Provide database storage and authentication services
- Data residency/region
- US/EU
- Privacy policy
- View policy
- Data processing agreement
- View DPA
- Security certifications
- SOC 2 Type II
Google (Gemini)
- Type of data processed
- Prompt text submitted by hosts
- Purpose of processing
- Generate AI-assisted quiz content
- Data residency/region
- US
- Privacy policy
- View policy
- Data processing agreement
- View DPA
- Security certifications
- SOC 2 Type II
Vercel
- Type of data processed
- Usage and performance metrics
- Purpose of processing
- Host the platform and monitor performance
- Data residency/region
- US
- Privacy policy
- View policy
- Data processing agreement
- View DPA
- Security certifications
- SOC 2 Type II
Resend
- Type of data processed
- Contact details used for email delivery
- Purpose of processing
- Send transactional and notification emails
- Data residency/region
- US
- Privacy policy
- View policy
- Data processing agreement
- View DPA
- Security certifications
- SOC 2 Type II