Last updated: May 31, 2026
Scillint uses the following third-party service providers ("subprocessors") to operate our service. Each subprocessor receives only the data necessary to perform its function and is contractually required to protect that data via a Data Processing Agreement (DPA). We update this list whenever we add, remove, or change a subprocessor.
| Subprocessor | Purpose | Data received | Location |
|---|---|---|---|
|
Supabase Inc. Infrastructure Privacy |
Database hosting, authentication, server-side functions, file storage | Account information (name, email, password hash), user-generated content (essays, practice answers, profile data), usage analytics, application logs | United States |
|
Anthropic, PBC AI Processing Privacy |
Powers the "Scill Guide" assistant — answers student questions, scores essays, generates personalized study recommendations | User-submitted text (essay drafts, questions, profile context). No payment information. | United States |
|
Stripe, Inc. Payments Privacy |
Processes subscription payments and refunds | Name, email, billing address, payment card details (Scillint does not store card details — they go directly to Stripe) | United States |
|
Resend, Inc. Transactional Email Privacy |
Sends transactional emails (password resets, payment confirmations, notification messages) | Recipient email, message content, send timestamps | United States |
|
PostHog, Inc. Product Analytics Privacy |
Tracks aggregated product usage and helps us improve the app | Session events (page views, button clicks), anonymized user identifier, browser/device information | United States / European Union (configurable) |
|
Netlify, Inc. Web Hosting Privacy |
Hosts and serves the Scillint website | IP addresses, browser user agents, server logs (no application data) | United States (global CDN) |
|
Google LLC (Google Workspace) Business Email DPA Terms |
Receives customer support emails and provides admin email accounts | Email content, sender/recipient addresses, attachments | United States |
|
HubSpot, Inc. Marketing CRM Privacy |
Manages marketing emails, lead capture, and customer lifecycle communications | Name, email, marketing preferences, interaction history | United States / European Union |
|
Sentry (Functional Software, Inc.) Error Monitoring Privacy |
Captures and reports application errors so we can fix them quickly | Error stack traces, browser type, URL where error occurred. Personally identifiable data is automatically scrubbed. | United States / European Union |
|
Better Stack (Better Stack OÜ) Uptime Monitoring Privacy |
Monitors service uptime and powers our status page | No user data — only synthetic health-check pings and server status | European Union |
|
HelpScout (Help Scout PBC) Customer Support Privacy |
Manages customer support tickets and conversations | Email correspondence content, support conversation history, customer email addresses | United States |
Before engaging a subprocessor, we verify that they:
We may update this list when we add, remove, or change subprocessors. When a material change occurs, we provide notice to customers via email at least 30 days before the change takes effect.
Questions about this list, our subprocessors, or our data-handling practices? Email privacy@scillint.com.