Subprocessors
Effective date: April 1, 2026
GradeThread (Pearson Media LLC) engages the third-party subprocessors below to provide the Service. Each processes personal data only as needed for its stated purpose and under contractual data-protection obligations. This list is referenced by our Privacy Policy and Data Processing Addendum.
1. Current subprocessors
Last updated: April 1, 2026.
| Subprocessor | Purpose | Data processed | Primary location |
|---|---|---|---|
| Supabase (self-hosted) | Database, auth, storage | Account data, grading photos, grades | United States |
| Cloudflare | CDN, Pages hosting, R2 object storage, WAF | Request metadata, served content, stored assets | Global (US-config) |
| Stripe | Payments & subscription billing | Billing details, payment tokens, email | United States |
| Anthropic | AI condition grading & listing generation (Claude) | Garment photos, listing text (no account PII) | United States |
| OpenAI | Listing/marketing image generation | Image prompts/inputs | United States |
| eBay | Marketplace listing, orders, payouts (FlipDesk) | Listing content, order/payout data | United States |
| Sentry | Error monitoring | Redacted error context, request metadata | United States |
| PostHog | Product analytics (consent-gated) | Usage events, pseudonymous identifiers | United States |
| Email/SMTP provider (e.g. Amazon SES) | Transactional & lifecycle email | Email address, message content | United States |
| Coolify host / VPS provider | Edge service + self-hosted Supabase hosting | All processed data in transit/at rest on the host | United States |
2. Changes & notification
We update this page when we add or replace a subprocessor and revise the “Last updated” date above. Customers with an active DPA may subscribe to change notifications by emailing [email protected]; we aim to provide reasonable advance notice of a new subprocessor so you can raise any objection.
3. Contact
Questions about our subprocessors or data processing: [email protected].