Algebro

Subprocessors

The third-party service providers Algebro uses to operate its platform.

Last updated: August 3, 2026

What is a subprocessor?

A subprocessor is a third-party company that Algebro hires to help run the platform. When you use Algebro, some of your data is processed by these companies on our behalf. For example, our database is hosted by Supabase, and the AI guide is powered by OpenAI.

We publish this list so that schools, districts, parents, and teachers can see exactly who handles student data, what they do with it, and how to verify their security and privacy practices. This is part of our commitment to transparency and to supporting district vendor vetting under FERPA, COPPA, and Florida student data privacy requirements.

Algebro maintains a Data Processing Agreement (DPA) with each subprocessor: executed directly with Supabase and OpenAI (July 2026), and incorporated into the service terms of Clerk, Vercel, Stripe, and Resend. Each subprocessor is contractually required to process data only as needed to provide its service to Algebro and to maintain appropriate security controls.

Current subprocessors

OpenAI

Purpose
Powers the Bro AI guide and AI-generated quiz feedback.
Data processed
Math problems, student answers, lesson context, and prior messages from the current tutoring session. No names, usernames, emails, or other personally identifiable information.
Location
United States
Resources
Privacy Policy: View privacy policy
Security / Trust: View trust page
Note: Algebro executed OpenAI’s Data Processing Addendum in July 2026. Requests contain no student names, usernames, or account identifiers; response storage is disabled on every API call; API data is not used to train OpenAI models and is retained by OpenAI for up to 30 days for abuse monitoring, then deleted.

Clerk

Purpose
User authentication, session management, and account security.
Data processed
Account identifiers (name, username, email for parents/teachers), password hashes, session tokens, and authentication metadata.
Location
United States
Resources
Privacy Policy: View privacy policy
Security / Trust: View trust pageSOC 2 Type 2 and HIPAA certified.

Vercel

Purpose
Web hosting, serverless compute, CDN, and performance monitoring (Analytics & Speed Insights).
Data processed
All data transmitted to and from the platform passes through Vercel infrastructure. Analytics and Speed Insights (page views, performance metrics, IP addresses) run only on public marketing pages and adult (teacher, parent, admin) surfaces. They are never loaded on student surfaces or for student sessions.
Location
United States (primary), with global CDN edge locations
Resources
Privacy Policy: View privacy policy
Security / Trust: View trust page

Supabase

Purpose
Primary database, file storage, and backend infrastructure.
Data processed
All educational records persisted by Algebro: student names, usernames, lesson progress, quiz scores, practice answers, AI-generated feedback, and virtual currency balances.
Location
United States (us-east-1)
Resources
Privacy Policy: View privacy policy
Security / Trust: View trust page
Note: Algebro executed Supabase’s customer DPA in July 2026. Supabase maintains its own subprocessor list (including AWS and Cloudflare) in Schedule 3 of its DPA.

Stripe

Purpose
Payment processing for parent subscriptions only. Stripe is not used for student, teacher, or school-issued accounts.
Data processed
Parent email address, billing address, and payment method details. Algebro stores only Stripe customer IDs and subscription status; no card numbers ever touch Algebro servers. No student, teacher, or school account data is sent to Stripe.
Location
United States
Resources
Privacy Policy: View privacy policy
Security / Trust: View trust page
Note: Stripe acts as an independent controller for some activities (fraud prevention, regulatory reporting, and improvement of its own payments services) as described in its DPA and Privacy Center. For everything else related to Algebro subscriptions, Stripe acts as a processor.

Resend

Purpose
Email delivery for account notifications and the opt-in newsletter, sent to adult account holders only (parents, teachers, and school administrators).
Data processed
Recipient email address, recipient name, and the content of each email. Students never receive email: student accounts have no email address on file, and the send layer refuses to send to any student account.
Location
United States
Resources
Privacy Policy: View privacy policy
Security / Trust: View trust page
Note: Added August 2026. Every newsletter email carries a working unsubscribe link, and every send is logged on our side. Transactional notices (for example, a receipt-style account notification) go only to the account holder they concern.

Notification of changes

Before adding a new subprocessor or materially changing the role of an existing one, Algebro will provide advance notice by:

  • Updating this page with the new subprocessor and the “Last updated” date
  • Notifying customers who have signed a data privacy agreement requiring such notice, on the timeline set in that agreement
  • Notifying customers who have opted in to subprocessor change emails (see below)

If a customer reasonably objects to a new subprocessor on data protection grounds, we'll work with the customer in good faith to resolve the concern. If we cannot reach a resolution, the customer may terminate their subscription and receive a pro-rated refund of any prepaid fees.

Get email notifications

To request email notifications of subprocessor changes (including if you are a school district privacy officer who is not the primary account holder), email jkorwin@algebro.ai with the subject line “Subprocessor change notifications” and we'll add you to the notice list.

Privacy inquiries

For questions about subprocessors, our DPAs, FERPA/COPPA compliance, or any other privacy or data protection matter, contact:

Algebro LLC

See also our Privacy Policy and Terms of Service.

Subprocessors | Algebro