Subprocessors
Last updated: October 7, 2026
Our subprocessors
NookScan Protocol™ engages the third-party service providers (“subprocessors”) listed below to operate the Service. Each subprocessor receives only the minimum data necessary for its function. This page supplements Section 7 of our Privacy Policy.
| Subprocessor | Service | Purpose | Data processed | Processing location | Terms |
|---|---|---|---|---|---|
| Google LLC | Firebase Authentication | Account creation and sign-in (via Google and Apple identity providers). | Name, email address, profile photo, authentication identifiers. | United States (us-central1) | Google Privacy Policy |
| Google LLC | Cloud Firestore | Cloud database for account profiles, scan report metadata, and waitlist entries. | Account profile, subscription status, scan metadata, compliance reports. | United States (us-central1) | Google Cloud Privacy Notice |
| Google LLC | Cloud Storage | Temporary storage of uploaded documents during the scan job. | Uploaded PDF documents and rendered page images. | United States (us-central1) | Google Cloud Privacy Notice |
| Google LLC | Cloud Functions | Serverless compute that executes our compliance analysis engines. | Document text and images, scan metadata. | United States (us-central1) | Google Cloud Privacy Notice |
| Google LLC | Firebase App Hosting | Hosts and serves the getnookscan.com website and the Android app (which loads the same site). | HTTP request data, IP address, user agent. | United States (us-central1) | Google Cloud Privacy Notice |
| Google LLC | App Check / reCAPTCHA v3 | Abuse and bot protection for API requests. | Device and browser signals, IP address. | United States / global edge | Google Privacy Policy |
| Google LLC | Cloud Vision API | Optical character recognition (OCR) for scanned or image-based PDFs. | Rendered page images of uploaded documents. | United States (us-central1) | Google Cloud Privacy Notice |
| Google LLC | Gemini API (gemini-2.5-flash) | AI-assisted visual and textual compliance analysis of documents. On Google's paid Gemini API tier, submitted data is not used to improve Google's products; Google retains it for a limited period for abuse monitoring. | Document text and rendered page images. | United States | Gemini API Terms |
| Apple Inc. | Sign in with Apple | OAuth identity provider for account creation and login. | Name, email address (or Apple private relay address), authentication identifiers. | United States / global | Apple Privacy Policy |
| Stripe, Inc. | Billing & payment processing | Subscription billing and payment processing. Stripe is PCI DSS Level 1 certified. | Billing name and email, payment card data (entered directly with Stripe), subscription status. | United States / global | Stripe Privacy Policy |
| Resend, Inc. | Transactional email delivery | Sends account and transactional emails (welcome, subscription, payment, and contact-form notifications). | Recipient name and email address, email message content. | United States | Resend Privacy Policy |
We will update this page at least 14 days before adding a new subprocessor. Questions: support@notarynookhub.com.