Subprocessors

This page lists the third-party subprocessors we use to operate, secure, and improve Zahan. We update this list as vendors change.

1. Subprocessor List

Each vendor below processes data on our behalf. The table summarizes the core service, data processed, and where processing takes place.

Supabase

Service: Database, Authentication

Data Processed: User accounts, quiz data

Location: US/EU

Privacy Policy: View policy

Google (Gemini)

Service: AI Content Generation

Data Processed: Quiz prompts

Location: US

Privacy Policy: View policy

Vercel

Service: Hosting, Analytics

Data Processed: Usage metrics

Location: US

Privacy Policy: View policy

Resend

Service: Email Delivery

Data Processed: Email addresses, names

Location: US

Privacy Policy: View policy

2. Additional Information

For transparency, we include the type of data processed, the purpose of processing, data residency, and links to privacy and DPA documentation when available.

Supabase

Type of data processed
User account data, quiz content
Purpose of processing
Provide database storage and authentication services
Data residency/region
US/EU
Privacy policy
View policy
Data processing agreement
View DPA
Security certifications
SOC 2 Type II

Google (Gemini)

Type of data processed
Prompt text submitted by hosts
Purpose of processing
Generate AI-assisted quiz content
Data residency/region
US
Privacy policy
View policy
Data processing agreement
View DPA
Security certifications
SOC 2 Type II

Vercel

Type of data processed
Usage and performance metrics
Purpose of processing
Host the platform and monitor performance
Data residency/region
US
Privacy policy
View policy
Data processing agreement
View DPA
Security certifications
SOC 2 Type II

Resend

Type of data processed
Contact details used for email delivery
Purpose of processing
Send transactional and notification emails
Data residency/region
US
Privacy policy
View policy
Data processing agreement
View DPA
Security certifications
SOC 2 Type II