Skip to main content

Subprocessors & Data Flow

A "subprocessor" is an outside service that stores or processes data on our behalf. The list below names every subprocessor Crescendo IQ uses and the categories of data that flow to each, so the schools and programs we serve can review and post this information as their student-data laws require.

This page is a factual disclosure of our data flows. It is not a privacy policy or terms of service.


Hosting & Infrastructure

Vercel

Application hosting and content delivery for crescendo-iq.com.

Data shared

  • All data served or processed by the app while a request is in flight
  • Request logs and IP addresses

Database

Neon (PostgreSQL)

Primary database. Stores the entire application dataset at rest.

Data shared

  • All student and parent records (names, emails, parent emails, birth year)
  • Custom profile field values
  • Practice logs, attendance records, and assessments
  • Organization, group, membership, and account data
The most sensitive subprocessor — it holds everything stored at rest.

File Storage

Vercel Blob

File storage for uploaded files (e.g. profile photos).

Data shared

  • Uploaded files, which may include student profile images

Email Delivery

Resend

Transactional email delivery when an organization has not connected its own mailbox.

Data shared

  • Recipient email address and name
  • Email body (invitations, profile-completion, and parent-verification messages)

Authentication / Sign-In

Google

"Sign in with Google" authentication, and sending email from an organization's own connected Gmail mailbox.

Data shared

  • Sign-in: Google profile (name, email, profile photo)
  • Email-send: the organization's own mailbox identity and the emails it sends
When an organization sends email through its own Google mailbox, that email stays within the organization's Google tenant.

Microsoft

Sending email from an organization's own connected Microsoft mailbox.

Data shared

  • The organization's own mailbox identity and the emails it sends
When an organization sends email through its own Microsoft mailbox, that email stays within the organization's Microsoft tenant.

Payments & Billing

Polar

Subscription payments and billing for the paying organization.

Data shared

  • The paying organization/admin's billing and subscription data (plan, seats)
Billing is organization-level; student data is not sent to Polar.