Vercel
Runs the application and serves the widget script.
Every request in transit, and standard server logs: IP address, user agent, path, timing. No database contents.
United States (deployment region iad1). Their privacy terms
Legal
Subprocessors
Every company that can see any part of a school's data.
In use
Supabase
The database and the staff sign-in service.
Everything the product stores: a school's content, its staff accounts, and the conversations and volunteered contact details of families who wrote in.
United States. Their privacy terms
Groq, SambaNova, Cloudflare, Cerebras and Google
Run the language models that draft an answer. Five providers so a failure at one, or a free-tier limit at four, is not a dead assistant.
The question exactly as the family typed it, and the passages of the school's own published content retrieved to answer it. Separately, the staff summary job sends the family's label, which is the parent names on the household record, or the household's email address when no name is held. All five are reached on free tiers, and a free tier is not the paid one: Google states that content sent to AI Studio is used to improve their products and can be read by a person. No family record, no contact details beyond that label, and no staff account ever reaches any of them.
United States. Their privacy terms
Voyage AI
Turns the school's own published passages, and a family's question, into the numbers that let the assistant find a passage that answers in different words than the family used.
The question exactly as the family typed it, and the school's own published content, for the embedding lane only.
United States. Their privacy terms
Firecrawl
Reads a school's own public website during setup so the assistant has something to answer from.
Public web pages, addressed by URL. No family data of any kind.
United States. Their privacy terms
Resend
Delivers the email the product sends: sign-in codes, booking confirmations and reminders, the Monday digest, and staff invitations.
The address, subject and body of every message it carries, which includes a family's name and the details of a tour they booked.
United States. Their privacy terms
Reads and writes the school's own calendar so a tour can be booked in a real free slot.
Calendar events created for booked visits, including the family's name and email as the invitee.
United States. Their privacy terms
Microsoft
Reads when a school's own staff are busy in Microsoft 365, so a tour is only offered in a time that is really free.
The times a connected staff member is busy, and their own work address. No family's name, message or contact detail is sent to Microsoft.
United States. Their privacy terms
Calendly
Reads the times a school has published as bookable in its own Calendly, so the assistant offers a real time instead of a second copy of the school's diary.
Nothing about a family is sent to Calendly. Times are read out of it, and Calendly tells us when one of its own bookings is made or canceled.
United States. Their privacy terms
Blackbaud
Reads the school's own catalog out of its student information system, so the assistant can say which grades the school takes and when its year runs.
Nothing about any family. The connection only reads, and only the school's list of divisions, grade levels and school-year dates. No student, applicant or contact record crosses it in either direction.
United States. Their privacy terms
Stripe
Takes the school's subscription payment.
The school's billing contact and card details. No family data.
United States. Their privacy terms
Sentry
Records errors so a fault is fixed rather than discovered by a school.
Stack traces, the URL of the page that failed and the identifiers on it. Message bodies and contact details are not attached to an error report.
United States. Their privacy terms
Not in use
No data reaches these. They are listed before a key is provisioned, so a vendor is never added quietly.
Anthropic
Declared as a per-lane escape hatch and wired to nothing. No code in the product calls Anthropic.
Nothing. The answer chain names four providers and Anthropic is not one of them, so provisioning this credential would list a vendor here and send them nothing.
United States. Their privacy terms
Postmark
Delivers email the product sends, and receives email families send to the school's Nalda address.
The address, subject and body of every message it carries, in both directions.
United States. Their privacy terms
Twilio
Carries text messages in both directions: a family's question arrives through it, and a reply a staff member has approved goes back out through it.
The mobile number and the text of the message.
United States. Their privacy terms