Legal
Subprocessors
Last updated August 4, 2026
Our Commitment
Hasule Inc., doing business as Moffeus, engages a limited number of third-party subprocessors to provide the platform and related services. Every subprocessor listed below is bound by a written data-processing agreement with confidentiality, security, and use-limitation terms at least as protective as our agreements with schools. Subprocessors may process personal data only to provide their service to us — never for advertising, profiling, resale, or training AI models.
Platform data is stored and processed in data centers located in the United States. Where personal data originating from the European Economic Area or the United Kingdom is involved, we rely on appropriate transfer safeguards, including Standard Contractual Clauses, as required under GDPR and UK GDPR.
Current Subprocessors
| Subprocessor | Purpose | Personal data involved | Location |
|---|---|---|---|
| Google Cloud Platform | Hosting, databases, file storage, and container infrastructure | All platform data | United States |
| Microsoft Azure (Azure OpenAI Service) | AI model hosting for Moffy chat, voice interviews, transcription, and embeddings | Chat submissions and profile context used to power AI features | United States |
| Pinecone | Vector search powering matching and retrieval | Embeddings derived from profiles and platform activity | United States |
| Mailgun (Sinch) | Transactional and notification email delivery | Names, email addresses, message content | United States |
| Twilio | SMS notifications and phone verification | Phone numbers, message content | United States |
| Stripe | Payment processing and billing | Billing contact and payment details | United States |
| Google (Identity / Firebase) | Google and Microsoft single sign-on | Authentication identifiers (name, email address) | United States |
| Google Maps Platform | Address validation, geocoding, and commute estimates | Addresses and approximate locations | United States |
| Google Analytics | Website usage analytics | Usage data, device information, IP address | United States |
Services That Are Not Subprocessors
Self-hosted components. Several parts of the platform run entirely inside our own Google Cloud environment and involve no additional third party. These include document e-signing, our relationship graph database, and caching infrastructure.
School-directed integrations. When a school connects its own systems — such as a learning management system (Canvas, Schoology, Blackboard), Google or Microsoft calendars, or video conferencing — data flows to and from those systems at the school's direction, under the school's own agreements with those vendors. They are not Moffeus subprocessors.
Changes to This List
We provide at least thirty (30) days' advance written notice before engaging a new subprocessor, except in emergency circumstances. Schools and partners may designate a contact to receive these notices by emailing privacy@moffeus.com with the subject "Subprocessor notifications." Schools may object to a new subprocessor on reasonable legal or compliance grounds as described in their service agreement.
Changelog
- August 4, 2026 — Initial publication of the subprocessor list.
Contact
Questions about this list or our data practices? Contact us at privacy@moffeus.com. See also our Privacy Policy and Terms of Service.