Trust hub
Privacy
Your data is yours. We process it on your instructions.
Your college or provider is the data controller for learner and staff records. QualityHero is the data processor. Here's what we collect, who else touches it, and how long we keep it.
You're the controller
Processor on your instructions
Retention you control
No ad tracking
What we collect and why
Sub-processors
The named third parties that help us deliver QualityHero. Updated when we add or remove one.
| Sub-processor | Purpose | Region |
|---|---|---|
| Supabase (managed Postgres + auth) | Database, authentication, file storage | EU |
| Cloudflare | Application hosting (Workers) + CDN | Global edge |
| Resend | Transactional email delivery | EU/US |
| OpenAI / Google AI | Optional AI features (only when enabled) | EU/US |
Retention, deletion and SARs
Want the full detail?
We're happy to share our DPA, sub-processor list, and answer IT or DPO questions.