Sub-processors
Effective
| Service | What it does for Fish | What it receives | When |
|---|---|---|---|
| Heroku (Salesforce) | Runs the application and its database | Everything stored in Fish | Always |
| Amazon Web Services (S3) | Stores uploaded files | Photos, attachments, documents and avatars | Always |
| Resend | Delivers email | Email address, and the message: sign-in links and notifications | Always |
| Twilio | Sends text messages | Mobile number and the text of an urgent alert | When a school sends urgent alerts by text |
| Stripe | Takes payments | Name, email, the amount and what it's for; card and bank details go to Stripe directly and never reach Fish | When a school takes payments |
| Sentry | Reports errors so we can fix them | Technical details of the error; set not to send personal data | Always |
| Apple Push Notification service | Delivers notifications to iPhones and iPads | A device token, and a notification's title and short text | When someone uses the iOS app |
| Google Firebase Cloud Messaging | Delivers notifications to Android phones | A device token, and a notification's title and short text | When someone uses the Android app |
| Google Calendar | Keeps a school's Google calendars and Fish in step | Calendar events | When a school connects Google Calendar |
AI assistants you connect
If your school turns on FISH AI, a person it allows can connect an AI assistant to their own account. The assistant's maker isn't our sub-processor: the person chooses it, and it reads only what that person can already see, when it asks. Student records are never available to it. See our Privacy Policy.
Changes
We tell every school's privacy contact 30 days before adding a sub-processor, and update this page with the date.
Questions? Write to hello@attackpenguin.com. If you're at a school, your school's office can help too.