← Privacy Policy
Data Processors
Last updated: June 2026
This page lists the third-party processors AceMark uses to operate the service. We share personal data with these processors only as needed to deliver functionality, under contracts that meet GDPR, India's DPDPA, and CCPA requirements. We do not sell personal data.
Infrastructure, communications & identity
| Processor | Purpose | Location | Data | Safeguards |
|---|---|---|---|---|
| Vercel | Application hosting + edge CDN | US / global edge | Requests, IP, edge metadata | SCCs; DPA |
| Railway | PostgreSQL database hosting | US | Account + usage data (encrypted at rest) | SCCs; DPA; encryption |
| Upstash | Background job queue + rate-limit counters | US / global | Ephemeral metadata | SCCs; DPA |
| Resend | Transactional + notification email delivery | US | Email address, message content | SCCs; DPA |
| OAuth sign-in | US / global | Auth identifiers (name, email) | SCCs; Google Cloud DPA |
AI-assisted features
AI-assisted features (such as draft study plans) may process the inputs you provide via the following AI infrastructure providers. Each processes your prompt under its own terms; where a provider offers a setting to exclude submitted data from model training, AceMark uses it.
- Google (Gemini) — Processes prompts for AI-assisted features
- Groq — Processes prompts for AI-assisted features
- Cerebras — Processes prompts for AI-assisted features
- Anthropic — Processes prompts for AI-assisted features
- OpenRouter — Routes prompts to AI infrastructure providers
Questions about data processing? Contact privacy@acemark.app.