Vercel
Runs the application and serves the widget script.
Every request in transit, and standard server logs: IP address, user agent, path, timing. No database contents.
Legal
Subprocessors
Every company that can see any part of a school's data, what they see, and where they are. This page is generated from the product's own configuration, so adding a vendor without listing it here is not possible.
In use
Supabase
The database and the staff sign-in service.
Everything the product stores: a school's content, its staff accounts, and the conversations and volunteered contact details of families who wrote in.
Cerebras, Groq and SambaNova
Run the language models that draft an answer. Three providers so a failure at one is not a dead assistant.
The question as typed, and the passages of the school's own published content retrieved to answer it. No contact details are put in a prompt.
Firecrawl
Reads a school's own public website during setup so the assistant has something to answer from.
Public web pages, addressed by URL. No family data of any kind.
Resend
Delivers the email the product sends: sign-in codes, booking confirmations and reminders, the Monday digest, and staff invitations.
The address, subject and body of every message it carries, which includes a family's name and the details of a tour they booked.
Reads and writes the school's own calendar so a tour can be booked in a real free slot.
Calendar events created for booked visits, including the family's name and email as the invitee.
Microsoft
Reads when a school's own staff are busy in Microsoft 365, so a tour is only offered in a time that is really free.
The times a connected staff member is busy, and their own work address. No family's name, message or contact detail is sent to Microsoft.
Blackbaud
Reads the school's own catalogue out of its student information system, so the assistant can say which grades the school takes and when its year runs.
Nothing about any family. The connection only reads, and only the school's list of divisions, grade levels and school-year dates. No student, applicant or contact record crosses it in either direction.
Stripe
Takes the school's subscription payment.
The school's billing contact and card details. No family data.
Sentry
Records errors so a fault is fixed rather than discovered by a school.
Stack traces, the URL of the page that failed and the identifiers on it. Message bodies and contact details are not attached to an error report.
Not enabled on this deployment
Named here because the product can use them, and because a list that only appears once a key is provisioned is a list a school finds out about afterwards. No data reaches them while they are in this state.
Anthropic
An alternative model provider, used only where an open model fails a quality check.
The same as the other model providers: the question and the retrieved passages.
Voyage AI
Turns the school's own published passages, and a family's question, into the numbers that let the assistant find a passage that answers in different words than the family used.
The question as typed, and the school's own published content. Nothing is stored on their side and no contact details are sent.
Postmark
Delivers email the product sends, and receives email families send to the school's Nalda address.
The address, subject and body of every message it carries, in both directions.
Twilio
Carries text messages in both directions: a family's question arrives through it, and a reply a staff member has approved goes back out through it.
The mobile number and the text of the message.