Privacy program version: 2026-07-25
Subprocessor List
Providers that may process information to operate Cashless Cafeteria and the defined reason each provider receives it.
Stripe
- Purpose
- Family payments, saved payment methods, refunds and disputes, school subscriptions, payout-account verification, and payment reconciliation.
- Student information involved
- Payment amount, status, household or customer reference, safe instrument details, and transaction context. Card and bank credentials are collected by Stripe.
Supabase
- Purpose
- Database, authentication, sessions, row-level access controls, private file storage, and server-side data operations.
- Student information involved
- The student, household, cafeteria, authorization, account, audit, request, and operational records needed for the service.
Vercel
- Purpose
- Application hosting, server execution, deployment infrastructure, operational logs, aggregated Web Analytics, and Speed Insights.
- Student information involved
- HTTP and device metadata and minimized operational measurements. Student pages and student audiences are excluded from product analytics.
Resend
- Purpose
- Transactional delivery of invitations, account, security, balance, purchase, payment-result, privacy, and support messages.
- Student information involved
- Recipient email, safe display name, school and necessary message content, action link, and delivery metadata.
Upstash
- Purpose
- Server-side rate limiting, idempotency, and bounded operational caching.
- Student information involved
- Minimized tenant-scoped identifiers and operational values with short expiration periods; sensitive key values are hashed.
Sentry
- Purpose
- Sampled error reporting, release diagnosis, and performance monitoring.
- Student information involved
- Minimized technical context. Default PII transmission is disabled, and student records, request bodies, credentials, and free-text notes are prohibited.
Provider restrictions
targeted or behavioral advertising or marketing directly to children; cross-service tracking, provider-owned profiling, or commercial profiles unrelated to the school contract; sale, rental, licensing, data brokerage, or eligibility and decision-making unrelated to cafeteria service; general-purpose or unrelated artificial-intelligence model training, or prompting a third-party AI service without approval for a defined contracted function; developing products unrelated to the contracted cafeteria service; combining identifiable student information with external or other-customer datasets for unrelated purposes.