Sub-Processors

Third-party services that process your data

Last updated: February 6, 2026

This page is updated whenever we change providers. Each provider is contractually bound to protect your data and use it only for the specific purposes described below.

We use the following third-party services ("sub-processors") to operate Praecepta. Each provider is contractually bound to protect your data and use it only for the specific purposes described below.

AI Providers

Google (Gemini API & OAuth)

AI tutoring responses, educational content generation, session analysis, and distillation

Data Shared:

Conversation text (your questions and messages)
Session context (topic being discussed)
Learning history context (for personalization)
Authentication credentials when signing in with Google (email, name, profile picture — via Supabase Auth)

Location: United States

Voyage AI

Semantic search and text embeddings for learning context retrieval

Data Shared:

Combined utterance and response text (for embedding generation)
Embeddings are stored locally, not by Voyage

Location: United States

Voice Processing

Modal

Voice processing (self-hosted speech-to-text via Parakeet TDT and text-to-speech via Kokoro TTS)

Data Shared:

Voice audio recordings (for transcription — processed on our self-hosted infrastructure, not stored)
Tutor response text (for voice synthesis)

Location: United States

Infrastructure

Supabase

Database hosting and authentication

Data Shared:

Account information (name, email, date of birth)
Learning data (conversations, sessions, canvas)
Authentication credentials (securely hashed)

Location: United States (AWS)

Vercel

Application hosting, serverless functions, and CDN

Data Shared:

HTTP requests (routed through Vercel infrastructure)
Deployment and build data

Location: United States

Resend

Transactional email delivery

Data Shared:

Email addresses (for delivery)
Email content (account notifications, security alerts)

Location: United States

Modal

Serverless Python execution for figure generation

Data Shared:

Python code generated by the tutor (no user personal data)

Location: United States

Cloudflare

DNS and DDoS protection

Data Shared:

HTTP request metadata (IP addresses, request headers)

Location: United States (global network)

Upstash (Vercel KV)

Serverless Redis cache for session state and AI model cache references

Data Shared:

Session identifiers, AI cache keys (no personal content)

Location: United States

Payment Processing

Stripe

Subscription billing and payment processing

Data Shared:

Email address (for receipts)
Subscription metadata (plan, status, billing period)
Praecepta does not store payment card numbers — all payment data is handled directly by Stripe

Location: United States

If you have questions about our sub-processors, please contact us at [email protected]