Sub-processors
This page lists the third-party service providers that process personal information on behalf of TEF TCF Canada Practice. It is part of our Privacy Policy and is referenced from our Terms of Service.
Last Updated
October 7, 2026 (version 2026-10-07).
1. What Sub-processors Are
A sub-processor is a third-party company that processes personal information on our behalf to help us provide the service. We choose sub-processors that we consider reputable, that offer reasonable contractual safeguards, and that have published privacy or data-processing terms. Each sub-processor remains responsible for its own privacy practices, and we remain responsible for our overall handling of your information under our Privacy Policy.
2. Runtime Sub-processors
The providers below process information at runtime — that is, while you are using the service. Each entry shows the purpose, the categories of data processed, the region in which processing primarily takes place, and a link to the provider's privacy policy.
| Sub-processor | Purpose | Data processed | Region | Provider policy |
|---|---|---|---|---|
| Stripe Payments Canada Ltd. | Payments, tax calculation, refunds, fraud screening | Email, name, billing address, payment method metadata, transaction amounts and history | Canada (data residency) / United States (corporate) | Privacy policy |
| Anthropic, PBC | AI writing-feedback evaluation, quality checks of AI speaking grades, and study-coach message generation (Claude Haiku model) | Writing prompt and your written response submitted for AI feedback; speaking session transcript and the task you were given | United States | Privacy policy |
| Google LLC (Gemini API) | AI speaking-grading and conversational practice replies (Gemini 2.5 Flash) | Transcribed speech text, scenario context, conversation history | United States | Privacy policy |
| Google LLC (Cloud Text-to-Speech) | Spoken examiner voice in speaking practice and mock exams (Text-to-Speech, Chirp 3 HD fr-CA voices) | The examiner's reply text only; none of your speech or personal data is sent | United States | Privacy policy |
| Groq, Inc. | Audio transcription via Whisper Large v3 | Recorded audio (transcribed in-memory; raw audio is not persisted on our servers unless you turn on recording retention, in which case it is stored privately for 30 days) | United States | Privacy policy |
| Resend, Inc. | Transactional and reminder email delivery | Email address, name, message content, delivery and engagement metadata | United States | Privacy policy |
| PostHog Inc. | Product analytics and operational telemetry | IP-derived data, browser and device details, page views, event properties, anonymized user identifier | United States or European Union (region per cluster configuration) | Privacy policy |
| MongoDB, Inc. (Atlas) | Application database hosting | All persisted account, study, purchase, and audit data described in our Privacy Policy | United States (us-east-1) | Privacy policy |
| Vercel Inc. | Application hosting, edge compute, content delivery, private file storage (Vercel Blob) | Request metadata, IP-derived data, deployment artifacts, speaking audio recordings (examiner lines, and your takes if you opt in) kept privately for 30 days | Global edge network | Privacy policy |
3. Build-time Providers
The providers below are used only at build time, in our internal content- generation pipeline. They do not receive end-user data at runtime. They are listed here for transparency.
| Provider | Purpose | Data processed | Region | Provider policy |
|---|---|---|---|---|
| OpenAI, L.L.C. | Build-time content generation validation (text-embedding-3-small) for our internal question bank. No end-user data is sent to OpenAI at runtime. | Internally generated question text only; never user-submitted content | United States | Privacy policy |
4. International Transfers
Several of the sub-processors above are located in the United States or process information in the United States. By using the platform, you understand that your personal information may be processed outside Canada and may be subject to access requests from foreign authorities under applicable local law. We rely on contractual safeguards, including standard data-protection clauses where available, with each sub-processor.
5. Changes to This List
We may add, remove, or replace sub-processors over time. When we make a material change to the runtime list, we will update this page and revise the "Last Updated" date and version. For users who have entered into a separate data processing addendum with us that requires advance notice of changes, we will provide that notice in accordance with that addendum.
6. Contact
Questions about our sub-processors or data-processing practices can be sent to support@tcftefprep.com.