Legal

Sub-processors

This page lists the third-party service providers that process personal information on behalf of TEF TCF Canada Practice. It is part of our Privacy Policy and is referenced from our Terms of Service.

Last Updated

April 28, 2026 (version 2026-04-28).

1. What Sub-processors Are

A sub-processor is a third-party company that processes personal information on our behalf to help us provide the service. We choose sub-processors that we consider reputable, that offer reasonable contractual safeguards, and that have published privacy or data-processing terms. Each sub-processor remains responsible for its own privacy practices, and we remain responsible for our overall handling of your information under our Privacy Policy.

2. Runtime Sub-processors

The providers below process information at runtime — that is, while you are using the service. Each entry shows the purpose, the categories of data processed, the region in which processing primarily takes place, and a link to the provider's privacy policy.

Sub-processorPurposeData processedRegionProvider policy
Stripe Payments Canada Ltd.Payments, tax calculation, refunds, fraud screeningEmail, name, billing address, payment method metadata, transaction amounts and historyCanada (data residency) / United States (corporate)Privacy policy
Anthropic, PBCAI writing-feedback evaluation (Claude Haiku model)Writing prompt and your written response submitted for AI feedbackUnited StatesPrivacy policy
Google LLC (Gemini API)AI speaking-grading and conversational practice replies (Gemini 2.5 Flash)Transcribed speech text, scenario context, conversation historyUnited StatesPrivacy policy
Groq, Inc.Audio transcription via Whisper Large v3Recorded audio (transcribed in-memory; raw audio is not persisted on our servers)United StatesPrivacy policy
Resend, Inc.Transactional and reminder email deliveryEmail address, name, message content, delivery and engagement metadataUnited StatesPrivacy policy
PostHog Inc.Product analytics and operational telemetryIP-derived data, browser and device details, page views, event properties, anonymized user identifierUnited States or European Union (region per cluster configuration)Privacy policy
MongoDB, Inc. (Atlas)Application database hostingAll persisted account, study, purchase, and audit data described in our Privacy PolicyUnited States (us-east-1)Privacy policy
Vercel Inc.Application hosting, edge compute, content deliveryRequest metadata, IP-derived data, deployment artifactsGlobal edge networkPrivacy policy

3. Build-time Providers

The providers below are used only at build time, in our internal content- generation pipeline. They do not receive end-user data at runtime. They are listed here for transparency.

ProviderPurposeData processedRegionProvider policy
OpenAI, L.L.C.Build-time content generation validation (text-embedding-3-small) for our internal question bank. No end-user data is sent to OpenAI at runtime.Internally generated question text only; never user-submitted contentUnited StatesPrivacy policy

4. International Transfers

Several of the sub-processors above are located in the United States or process information in the United States. By using the platform, you understand that your personal information may be processed outside Canada and may be subject to access requests from foreign authorities under applicable local law. We rely on contractual safeguards, including standard data-protection clauses where available, with each sub-processor.

5. Changes to This List

We may add, remove, or replace sub-processors over time. When we make a material change to the runtime list, we will update this page and revise the "Last Updated" date and version. For users who have entered into a separate data processing addendum with us that requires advance notice of changes, we will provide that notice in accordance with that addendum.

6. Contact

Questions about our sub-processors or data-processing practices can be sent to support@tcftefprep.com.

Sub-processors | TEF TCF Canada Practice | TCF TEF Prep