1. Current subprocessors
- Supabase — managed PostgreSQL database, authentication, storage, and realtime services; account, workspace, league, media, and technical data; regions designated by M4EIQ and Supabase.
- Vercel — application hosting, serverless execution, content delivery, and operational logs; user requests, content, and technical data; global infrastructure that may include the United States.
- Stripe — organizer season billing and, when enabled, Stripe Connect Checkout, payment, refund, dispute, and payout support; account, transaction, donor, order, and billing data; locations designated by Stripe.
- Resend — transactional email delivery when configured; recipient email, message content, and delivery metadata; locations designated by Resend.
- OpenAI — optional game recap or practice-plan generation when configured; limited prompt content and technical metadata; locations designated by OpenAI.
- Google — optional Gemini game recap or practice-plan generation when configured; limited prompt content and technical metadata; locations designated by Google.
2. Conditional services
Resend processes information only where email delivery is configured. OpenAI or Google processes information only when the corresponding provider is configured and an authorized feature requests generation. A deployment generally needs only one configured AI provider for a given generation path.
3. Payment and external services
Stripe may act as an independent controller for portions of its payment, fraud, compliance, and connected-account services under its own terms. Organizer-provided registration and external donation links lead to services selected by the organizer and are not Kabola subprocessors.
4. Changes and objections
M4EIQ may update this list as Kabola changes. We will publish material additions before or promptly after they become active where advance notice is not practical. Organizer customers with a reasonable data-protection objection should contact us promptly so the parties can discuss an alternative or termination of the affected service.
5. International processing and contact
Vendor processing may occur outside Canada and is subject to the laws of those locations. This notice is maintained by M4EIQ Inc. in Ontario, Canada and is read with the Privacy Policy and DPA. Contact info@m4eiq.tech. M4EIQ Inc.'s registered address is 168C Rivington St., Carp, ON K0A 1L0 CA.