Subprocessors
Vendors Viva Longer LLC, doing business as Ashby Care, uses to provide the service. Version subprocessors-2026-08-29.
Effective: 29 August 2026. Version: subprocessors-2026-08-29.
Viva Longer LLC, doing business as Ashby Care, uses these vendors to provide the service. This list is the source of truth published at ashbycare.com/legal/subprocessors. Material additions are noticed under the DPA (email to the owner of record or an in-app banner).
Child-sensitive data is limited as noted. We do not put children’s names, photos, or care notes in email bodies or in product analytics.
| Vendor | Role | Data that may be processed | Where data is processed | Integral to core service? |
|---|---|---|---|---|
| Google Cloud (GCP) | Hosting: Cloud Run, Cloud SQL PostgreSQL, Cloud Storage (photos), Secret Manager, logging | Application data as stored in the product, including child and family records the Center submits; logs scrubbed of child-sensitive content | United States (us-west1) | Yes |
| Firebase Authentication (Google) | User sign-in (UID, email) | Adult account identifiers. Roles and child records live in our database, not in Firebase custom claims | United States | Yes |
| Stripe | Tuition and Ashby subscription payments | Adult billing identity, tokenized payment methods. No raw card numbers on Ashby servers | United States | Yes for billing |
| Twilio SendGrid | Transactional email to adults | Adult email address; message metadata. Do not put child-sensitive content in email bodies (link to log in instead) | United States | Operational email |
| AI provider (named at launch) | Optional draft text | Short staff notes and activity types only. Contract: no training, no retention beyond inference. No child profiles, photos, or medical records. | Per provider | No — optional feature |
| Product analytics (if enabled) | Feature telemetry | Feature events, error IDs. Zero child or adult personal information. If a vendor cannot guarantee that, we do not enable it | Per vendor | No |
Changes: material additions get notice under the DPA. Questions: privacy@ashbycare.com.
Terms · Privacy · DPA · Subprocessors