Subprocessor list
Tributary Studios LLC uses the service providers below to operate, secure, support, deliver, and bill for dooMO.
Current subprocessors
| Provider | Purpose | Data categories | Location/posture |
|---|---|---|---|
| Google Cloud / Firebase | Firebase Authentication, Cloud Firestore database, Cloud Storage, Cloud Functions, Firebase Cloud Messaging, and Firebase Crashlytics. | Account data, authentication identifiers, organization data, building data, task data, comments, photo/image attachment metadata and content, notification tokens, diagnostic logs, crash diagnostics, operational logs, request metadata, and related service data. | Cloud infrastructure configured for the United States where available; some Google/Firebase processing may occur through provider-controlled systems and support infrastructure. |
| Vercel | Web hosting, build delivery, edge network, deployment infrastructure, and hosting-related logs for the web portal. | Web request metadata, public web assets, deployment logs, hosting logs, limited operational metadata, and cookies or metadata needed to deliver the web portal. | United States and global edge network/service infrastructure. |
| Stripe | Checkout, subscription billing, invoices, payment method updates, customer portal, payment status, and subscription management. | Billing contact information, customer identifiers, subscription identifiers, invoice identifiers, payment status, billing period information, and payment details entered directly into Stripe-hosted pages. | Stripe-controlled payment environment and service infrastructure. Payment card and bank details are entered directly into Stripe and do not pass through dooMO servers. |
| Resend | Transactional email delivery, including invitations, notifications, password-related messages, billing-related messages, and support-related messages. | Recipient email addresses, rendered email content, delivery metadata, bounce logs, complaint logs, and related email-delivery data. | Email delivery infrastructure controlled by Resend and its providers. |
| Apple Push Notification service | Push notification delivery to the dooMO iOS app. | Apple push tokens, notification payload metadata, and delivery metadata. | Apple-controlled service infrastructure. |
| Google Sign-In | Optional authentication for users who choose Google sign-in. | Google authentication identifiers and profile fields returned during sign-in. | Google-controlled authentication infrastructure. |
| Sign in with Apple | Optional authentication for users who choose Apple sign-in. | Apple authentication identifiers, identity token, and profile fields returned during sign-in, such as first-time name if provided. | Apple-controlled authentication infrastructure. |
Change notice
Tributary may update this list as dooMO changes.
For customers with an applicable Data Processing Addendum, order form, or district agreement, Tributary will provide at least 30 days' advance notice before adding a new material subprocessor where practical, unless an urgent security, continuity, or legal need requires a shorter period.
Notice may be provided by email to the organization administrator, in-product notice, update to this page, or another method described in the applicable agreement.
If a customer reasonably objects to a new material subprocessor during the notice period, Tributary and the customer will work in good faith to resolve the objection. If the objection cannot be resolved, the customer may terminate the affected paid Service and receive a pro-rata refund of prepaid unused fees for the terminated portion, unless the applicable order form states otherwise.
Contact
Questions about sub-processors should be sent to: support@doomotasks.com.