Subprocessor List

Subprocessor List

Last updated: June 1, 2026

This page identifies third-party vendors that may process TaleTykes data when corresponding platform features, integrations, or environments are enabled.

School and district teams should review this list alongside the Privacy Policy, Terms of Service, and any signed data privacy agreement.

01

Overview

Optiarms, Inc. dba TaleTykes uses third-party service providers ("subprocessors") to host, secure, deliver, and support the TaleTykes platform. This page lists subprocessors that may process personal information, student data, or education records when corresponding features are enabled in your environment, plan, or school contract.

The exact subprocessors in use may vary by deployment environment, customer configuration, enabled integrations, and feature flags. A provider marked environment_specific or pending may not be active in every deployment.

02

Changes to This List

We may add, replace, or remove subprocessors as the platform evolves. For school and district customers, material subprocessor changes may be governed by the notice and approval terms in the applicable data privacy agreement or master services agreement.

Questions about subprocessors may be sent to privacy@taletykes.com. Procurement and security reviews may also reference our Privacy Policy and Trust Center.

  • This public list is updated when we materially change subprocessors used in production.
  • Signed school or district contracts control if additional notice or consent is required before a new subprocessor may process student data.
  • See the Privacy Policy section on subprocessors for baseline contractual commitments.

03

Data Use Restrictions

Subprocessors may process information only to perform the services described in our agreements with them and with us. We require subprocessors that handle student or child data to maintain appropriate confidentiality, security, and use restrictions.

  • We do not authorize subprocessors to sell student data or use education records for targeted advertising.
  • AI subprocessors receive pseudonymized prompts and work excerpts for configured educational features, not for unrelated commercial profiling.
  • Optional integrations such as Clever, ClassLink, or LTI are enabled only when a customer configures them.

04

Contact

Subprocessor questions, procurement requests, and data processing inquiries may be sent to privacy@taletykes.com. Legal notices may be sent to legal@taletykes.com.

Subprocessor Inventory

Vendors that may process student or school data under configured features and district agreements.

ProviderPurposeData classesRegionStatus
VercelApplication hosting, edge routing, logs, and deployment infrastructureaccount metadata, request metadata, application logsUS/EU, region dependentenvironment specific
PostgreSQL database providerPrimary application database for learner, class, assignment, and audit dataapplication records, learner progress, school roster dataEnvironment dependentenvironment specific
Upstash RedisCaching, rate limits, queues, and ephemeral AI/cache state when configuredcache keys, rate-limit counters, short-lived metadataUS/EU, region dependentenvironment specific
Vercel BlobOptional storage for generated assets, exports, and uploaded learning artifactsuploaded files, generated files, signed asset URLsUS/EU, region dependentenvironment specific
IP intelligence provider (e.g. IPinfo)Optional coarse geolocation and VPN/proxy signals for suspicious-login detection when configuredIP address at query time, country/ASN metadataUS/EU, provider dependentenvironment specific
SentryError monitoring and performance diagnostics when configurederror traces, device/browser metadata, redacted request contextUS/EU, region dependentenvironment specific
AnthropicStructured educational generation and scoring when configuredpseudonymized prompts, student work excerptsUSenvironment specific
xAIFallback educational generation when configuredpseudonymized prompts, student work excerptsUSenvironment specific
OpenAIOptional oral-reading transcription (Whisper) when configuredaudio URL, oral-reading transcriptUS, contract dependentenvironment specific
Managed ASR ProviderOptional oral-reading transcription and word alignment (non-OpenAI)audio URL, oral-reading transcriptContract dependentpending
Translation ProviderOptional navigation, family communication, and support translationtext selected for translationContract dependentpending
StripeSubscription billing, payment processing, and optional COPPA identity verificationbilling contact, payment metadata, identity verification documentsUS/EUactive
PersonaOptional alternate verifiable parental consent identity verification when configuredidentity verification documents, verification status metadataUS, contract dependentenvironment specific
Google OAuthAdult authentication when Google sign-in is enabledemail address, name, profile imageUS/EU, provider dependentenvironment specific
Cloudflare TurnstileBot protection on sign-up, sign-in, and sensitive formschallenge metadata, browser signalsUS/EU, provider dependentenvironment specific
Plausible AnalyticsOptional privacy-preserving, cookieless site analytics when configuredaggregate page views, referrer URLEU/US, provider dependentenvironment specific
InngestBackground job orchestration for AI, retention, roster sync, and maintenance tasksjob payloads, task metadataUS/EU, region dependentenvironment specific
CleverOptional school roster and SSO integration when enabled by the customerroster identifiers, student names, grade levels, class assignmentsUSpending
ClassLinkOptional school roster and SSO integration when enabled by the customerroster identifiers, student names, grade levels, class assignmentsUSpending
SendGrid or email delivery providerAccount, invite, report, and notification email deliveryemail address, message metadataContract dependentenvironment specific