Subprocessors
Last updated: 2026-05-13
ZuKeepr engages the third-party service providers listed below to operate the platform and deliver services to users. Each subprocessor is required to commit to data protection obligations consistent with ZuKeepr's Data Processing Agreement and applicable privacy law.
This list is maintained in the ZuKeepr source repository and is updated whenever a subprocessor is added, changed, or removed. For questions, contact privacy@zukeepr.com.
| Subprocessor | Purpose | Data Location | Data Categories | Last Updated |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure and S3 file storage (daycare photos, documents, uploaded assets) | Canada (ca-central-1) | All platform data, uploaded files | 2026-05-13 |
| MongoDB Atlas | Database hosting for all application data | Canada Central | Account, application, enrollment, and message data | 2026-05-13 |
| Stripe | Payment processing and Stripe Connect payouts to daycare providers | United States | Payment information, transaction records | 2026-05-13 |
| Vercel | Web application hosting for the ZuKeepr Next.js frontend | United States / global edge | HTTP request data, session cookies | 2026-05-13 |
| Firebase (Google) | User authentication and sign-in (server-side auth integration) | Google infrastructure | Auth tokens, sign-in records | 2026-05-13 |
| AWS Simple Email Service (SES) | Transactional email delivery (enrollment notifications, OTP, account emails) | United States | Recipient email address, message content | 2026-05-13 |
| Resend | Admin notification emails (internal platform alerts, MRR milestones, support ticket flags) | United States | Recipient email address, message content | 2026-05-13 |
| Microsoft Clarity | Anonymized usage analytics — session replays and heatmaps to improve usability (analytics consent required) | Microsoft global infrastructure | Aggregated session and interaction data; all form fields masked; sensitive pages fully excluded from recording | 2026-05-13 |
Amazon Web Services (AWS)
- Purpose
- Cloud infrastructure and S3 file storage (daycare photos, documents, uploaded assets)
- Data Location
- Canada (ca-central-1)
- Data Categories
- All platform data, uploaded files
- Last Updated
- 2026-05-13
MongoDB Atlas
- Purpose
- Database hosting for all application data
- Data Location
- Canada Central
- Data Categories
- Account, application, enrollment, and message data
- Last Updated
- 2026-05-13
Stripe
- Purpose
- Payment processing and Stripe Connect payouts to daycare providers
- Data Location
- United States
- Data Categories
- Payment information, transaction records
- Last Updated
- 2026-05-13
Vercel
- Purpose
- Web application hosting for the ZuKeepr Next.js frontend
- Data Location
- United States / global edge
- Data Categories
- HTTP request data, session cookies
- Last Updated
- 2026-05-13
Firebase (Google)
- Purpose
- User authentication and sign-in (server-side auth integration)
- Data Location
- Google infrastructure
- Data Categories
- Auth tokens, sign-in records
- Last Updated
- 2026-05-13
AWS Simple Email Service (SES)
- Purpose
- Transactional email delivery (enrollment notifications, OTP, account emails)
- Data Location
- United States
- Data Categories
- Recipient email address, message content
- Last Updated
- 2026-05-13
Resend
- Purpose
- Admin notification emails (internal platform alerts, MRR milestones, support ticket flags)
- Data Location
- United States
- Data Categories
- Recipient email address, message content
- Last Updated
- 2026-05-13
Microsoft Clarity
- Purpose
- Anonymized usage analytics — session replays and heatmaps to improve usability (analytics consent required)
- Data Location
- Microsoft global infrastructure
- Data Categories
- Aggregated session and interaction data; all form fields masked; sensitive pages fully excluded from recording
- Last Updated
- 2026-05-13
See also: Privacy Policy §7 · Data Processing Agreement §6