Subprocessors

This page lists the third-party service providers (subprocessors) that may process personal data on behalf of The Jam. We update this page when we add or remove subprocessors.

📧 Subscribe to Updates

Get notified when we add new subprocessors or make changes to this list.

Last updated: February 2026

Supabase

supabase.com →

Purpose:

Database, authentication, and storage

Location:

United States (AWS)

Data processed:

Account dataUser contentAuthentication tokens

Vercel

vercel.com →

Purpose:

Application hosting and CDN

Location:

Global (Edge network)

Data processed:

IP addressesAccess logsSession data

GitHub

github.com →

Purpose:

OAuth authentication, issue tracking, code hosting

Location:

United States

Data processed:

GitHub profileOAuth tokensChallenge submissions

Stripe

stripe.com →

Purpose:

Payment processing (marketplace)

Location:

United States

Data processed:

Payment informationTransaction records

Base (Coinbase)

base.org →

Purpose:

Blockchain for escrow smart contracts

Location:

Decentralized

Data processed:

Wallet addressesTransaction hashes

PostHog

posthog.com →

Purpose:

Product analytics (optional)

Location:

European Union / United States

Data processed:

Usage analyticsFeature flags

Data Processing Agreements

We have Data Processing Agreements (DPAs) in place with all subprocessors that handle personal data on our behalf. These agreements ensure that subprocessors are contractually obligated to protect your data in accordance with applicable data protection laws.

International Transfers

For transfers of personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses (SCCs) approved by the European Commission
Adequacy decisions where applicable
Binding Corporate Rules for applicable subprocessors

Questions?

If you have questions about our subprocessors or data processing practices, please contact us at privacy@the-jam.webglo.org.

Data Processing Agreements

International Transfers

For transfers of personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses (SCCs) approved by the European Commission
Adequacy decisions where applicable
Binding Corporate Rules for applicable subprocessors

Questions?

If you have questions about our subprocessors or data processing practices, please contact us at privacy@the-jam.webglo.org.