📋

Subprocessors

Effective from: June 4, 2026

MscTutor uses the following third-party service providers to operate the platform. Each is bound by a Data Processing Agreement and processes data only as our instructed processor. Published per India DPDP Act 2023 §11(2) and GDPR Art. 28.

Vendor	Location	Purpose	Data	Safeguard
Google Firebase	United States	Authentication + Cloud Messaging	Email, UID, push token	SCCs + Google DPA
Razorpay	India	Payment processing	Name, email, payment metadata	India-local (no transfer)
DeepSeek	China / Singapore	LLM inference for AI answers	Question text only — not identity	DPA in progress
Hugging Face	United States / EU	Embedding model for semantic search	Question text only	SCCs + Hugging Face DPA
Cloudflare R2	Global edge	File storage (profile photos, OCR uploads)	Uploaded files	SCCs + Cloudflare DPA
Upstash Redis	United States	Counters, rate limits, session caches	IP, UID, counter values	SCCs + Upstash DPA
Vercel	United States / EU	Hosting + CDN	HTTP request logs	SCCs + Vercel DPA
Resend	United States	Transactional email delivery	Email address + message text	SCCs + Resend DPA

We notify registered users at least 14 days before adding a new subprocessor that materially affects how data is processed. To object or request the latest DPA, email support@msctutor.in.