Sub-processors
LAST UPDATED: JUNE 2026
This is the current list of third-party sub-processors RoLearn engages to provide the Service. It is referenced by our Privacy Policy and Data Processing Agreement. We update it as our vendors change.
| Sub-processor | Purpose | Data categories | Location |
|---|---|---|---|
| Roblox Corporation | Source of publicly available game metrics and metadata. | Public game data only (no RoLearn user/player data sent). | United States |
| Google LLC (Sign-in with Google) | Optional account sign-in / linking. | Google account ID, name, email, profile picture. | United States |
| Google LLC (Google Fonts) | Delivery of the web fonts used across the interface. | IP address and user-agent, sent to Google when a page requests a font. | United States |
| Google LLC (YouTube Data API) | Discovery of public creator videos and channel metrics. | Public creator/channel data (third parties). | United States |
| Lemon Squeezy, LLC | Subscription billing and payment processing. | Customer ID, subscription status, billing events. Card data handled solely by Lemon Squeezy. | United States |
| Twilio Inc. (SendGrid) | Transactional and opt-in email delivery. | Email address, message content (alerts, briefs, invites). | United States |
| PostHog Inc. | Product analytics and session replay (consent-gated). | Interaction events, session recordings for consenting identified users. | United States |
| Functional Software, Inc. (Sentry) | Error monitoring and performance tracing. | Error/stack-trace context, user identifiers in error tags. | United States |
| Anthropic PBC (Claude) | AI-generated insights, Dev Lens analysis, RLBot assistant. | Game metadata and user prompt text (no player PII). | United States |
| The Constant Company, LLC (Vultr) | Application, API, and background-worker compute hosting. | All data processed by the Service in transit and in application memory; server access logs. | United States |
| Amazon Web Services, Inc. (RDS) | Primary production database hosting (managed PostgreSQL). | All account, workspace, and SDK event data at rest, including player_id and country. | United States |
| Amazon Web Services, Inc. (S3) | Customer-configured destination for SDK data exports. | Encrypted SDK event data (incl. player_id), written to the customer's own bucket. | United States / customer-selected region |
| Cloudflare, Inc. | CDN, DDoS protection, and ML-artifact storage (R2). | Traffic metadata; ML model files (non-personal). | Global edge / United States |
| Apify Technologies s.r.o. | Collection of public social earned-media (TikTok, Instagram, Facebook). | Public creator handles, follower counts, post content (third parties). | European Union (Czech Republic) |
| Discord Inc. | Internal operations notifications (sales-lead alerts). | Sales-lead name, email, company, source IP. | United States |
| X Corp. (Twitter / X API) | Discovery of public posts and creator metrics. | Public author IDs, follower counts, post text (third parties). | United States |
| Amazon.com, Inc. (Twitch API) | Discovery of public streams and creator metrics. | Public creator IDs, follower counts, stream metadata (third parties). | United States |
| Meta Platforms, Inc. (Instagram Graph API) | Discovery of public posts and creator metrics. | Public creator handles, engagement data (third parties). | United States |
Notifications of changes
Enterprise and SDK customers may subscribe to advance notice of new sub-processors as set out in our DPA. To request notifications or raise an objection, contact [email protected].