iStarPal Sub-Processor List
Last updated: 25 July 2026
Starclub Education Pte Ltd ("iStarPal") engages the following third-party sub-processors to store, host, and process data to deliver the service. All sub-processors are bound by data processing agreements requiring compliance with applicable data protection laws, including the Singapore Personal Data Protection Act (PDPA) and Malaysian Personal Data Protection Act (PDPA):
- Supabase Inc. — Database, authentication, and user storage (Region: Singapore ap-southeast-1).
- Anthropic PBC — AI tutoring model inference (Region: United States). Note: Processed under Commercial Data Processing Addendum with Standard Contractual Clauses (SCCs). Customer inputs and outputs are never used to train global AI models.
- Railway Corp. — Backend API infrastructure and application hosting.
- Vercel Inc. — Web application hosting and edge deployment.
Payment Processors (When Enabled):
- Stripe Payments Europe, Ltd. / Stripe Inc. — Payment processing and transaction security.
- RevenueCat Inc. — Subscription state management and in-app purchase validation.
Sub-Processor Changes & Notice:
We reserve the right to update this list as our infrastructure evolves. We provide advance notice of new sub-processors by updating this page. Users and school partners may subscribe to change notifications or submit inquiries by contacting our Data Protection Officer at privacy@istarpal.com.