Sub-processors
LAST UPDATED: SEPTEMBER 2026
This is the current list of third-party sub-processors ROLearn engages to provide the Service. It is referenced by our Privacy Policy and Data Processing Agreement. We update it as our vendors change.
Current sub-processors
| Sub-processor | Purpose | Data categories | Location |
|---|---|---|---|
| Roblox Corporation | Source of publicly available game metrics and metadata for all users. For Studio customers who connect Roblox Open Cloud, requests are also made to Roblox with the customer’s own API key, on the customer’s instruction. | Public game data. For connected Studio customers: reads and writes of the customer’s own experience data (analytics, DataStores that may contain player identifiers, messaging, ads, catalog and thumbnails). | United States |
| Google LLC (Sign-in with Google) | Optional account sign-in / linking. | Google account ID, name, email, profile picture. | United States |
| Google LLC (Google Fonts) | Delivery of the web fonts used across the interface. | IP address and user-agent, sent to Google when a page requests a font. | United States |
| Google LLC (AdSense) | Advertising on public pages. Consent-gated via Google Consent Mode v2: ad storage and ad personalization stay denied until the visitor accepts the cookie banner. | IP address, user-agent, page URL. Advertising identifiers only after consent. | United States |
| Google LLC (YouTube Data API) | Discovery of public creator videos and channel metrics. | Public creator/channel data (third parties). | United States |
| Lemon Squeezy, LLC | Subscription billing and payment processing. | Customer ID, subscription status, billing events. Card data handled solely by Lemon Squeezy. | United States |
| Amazon Web Services, Inc. (SES) | Transactional and opt-in email delivery (Amazon Simple Email Service). | Email address, message content (alerts, briefs, invites). | United States |
| PostHog Inc. | Product analytics and session replay (consent-gated). | Interaction events, session recordings for consenting identified users. | United States |
| Functional Software, Inc. (Sentry) | Error monitoring and performance tracing. | Error/stack-trace context, user identifiers in error tags. | United States |
| Anthropic PBC (Claude) | AI-generated insights, Dev Lens analysis, RLBot assistant. | Game metadata and user prompt text (no player PII). | United States |
| Amazon Web Services, Inc. (EC2) | Application, API, and background-worker compute hosting, including the in-memory cache and job queue. | All data processed by the Service in transit and in application memory; server access logs; local copies of database backups (kept 14 days). | United States |
| Amazon Web Services, Inc. (RDS) | Primary production database hosting (managed PostgreSQL). | All account, workspace, and SDK event data at rest, including pseudonymised player identifiers and country. | United States |
| Amazon Web Services, Inc. (S3) | Customer-configured destination for SDK data exports. | Encrypted SDK event data (incl. player_id), written to the customer’s own bucket. | United States / customer-selected region |
| Cloudflare, Inc. | CDN, DDoS protection, and object storage (R2) for database backups and ML model files. | Traffic metadata (including IP address); full database backups containing account and workspace data; ML model files (non-personal). | Global edge / United States |
| Apify Technologies s.r.o. | Collection of public social earned-media (TikTok, Instagram, Facebook). | Public creator handles, follower counts, post content (third parties). | European Union (Czech Republic) |
| Discord Inc. | Internal operations notifications (sales-lead alerts). | Sales-lead name, email, company, source IP. | United States |
| X Corp. (Twitter / X API) | Discovery of public posts and creator metrics. | Public author IDs, follower counts, post text (third parties). | United States |
| Amazon.com, Inc. (Twitch API) | Discovery of public streams and creator metrics. | Public creator IDs, follower counts, stream metadata (third parties). | United States |
| Meta Platforms, Inc. (Instagram Graph API) | Discovery of public posts and creator metrics. | Public creator handles, engagement data (third parties). | United States |
Notifications of changes
Enterprise and SDK customers may subscribe to advance notice of new sub-processors as set out in our DPA. To request notifications or raise an objection, contact [email protected].