๐
Subprocessors
Effective from: June 4, 2026
MscTutor uses the following third-party service providers to operate the platform. Each is bound by a Data Processing Agreement and processes data only as our instructed processor. Published per India DPDP Act 2023 ยง11(2) and GDPR Art. 28.
| Vendor | Location | Purpose | Data | Safeguard |
|---|---|---|---|---|
| Google Firebase | United States | Authentication + Cloud Messaging | Email, UID, push token | SCCs + Google DPA |
| Razorpay | India | Payment processing | Name, email, payment metadata | India-local (no transfer) |
| DeepSeek | China / Singapore | LLM inference for AI answers | Question text only โ not identity | DPA in progress |
| Hugging Face | United States / EU | Embedding model for semantic search | Question text only | SCCs + Hugging Face DPA |
| Cloudflare R2 | Global edge | File storage (profile photos, OCR uploads) | Uploaded files | SCCs + Cloudflare DPA |
| Upstash Redis | United States | Counters, rate limits, session caches | IP, UID, counter values | SCCs + Upstash DPA |
| Vercel | United States / EU | Hosting + CDN | HTTP request logs | SCCs + Vercel DPA |
| Resend | United States | Transactional email delivery | Email address + message text | SCCs + Resend DPA |
We notify registered users at least 14 days before adding a new subprocessor that materially affects how data is processed. To object or request the latest DPA, email support@msctutor.in.