Sub-processors
Effective Oct 8, 2026 · Version 2026-10-08--01
Squaaads Design Services Inc., doing business as Jam (“Jam”, “we”, “us”) uses the providers below to run Spell. Each processes personal information only to provide its service to us, under a written agreement. None of them may use studios’ content to train AI models. See also our Privacy Policy.
Current sub-processors
| Sub-processor | What it does for Spell | Information processed | Location |
|---|---|---|---|
| Supabase, Inc. | Database, sign-in and file storage for every instance, and the waitlist | Account information and all customer content, including files | Canada (Montréal) |
| Vercel, Inc. | Hosting and running the application, delivering pages, and page-speed measurement on public pages when you allow it | Requests and network addresses, page content in transit, speed measurements | Canada (Montréal) for the application; a global network for static pages |
| Resend (Plus Five Five, Inc.) | Sending Spell’s emails: invitations, notifications, signature requests, reminders | Recipient names and addresses, email content, delivery events | United States |
| Anthropic, PBC | Astra, only on instances where a studio has enabled it | Questions, the instance content needed to answer them, attached files | United States |
| Google LLC | Sign in with Google, where an instance enables it; fonts while a studio designs a Sign document | Name, email address and profile picture; network address when fonts load | United States and global |
Services a studio chooses to connect
These are not our sub-processors: a studio connects them to its own accounts, and they handle data under the studio’s agreements with them. They are listed so you know where information can go.
- Slack — Notifications by direct message, and Astra in Slack
- Dropbox — A folder for each client and project, kept in step with Spell
- Xero — Connecting a studio’s accounting organization
- Hubdoc — Forwarding approved contractor invoices by email
Separately, Jam uses Calendly to book walkthroughs from our public pages; what you enter there is handled under Calendly’s own policies.
Changes to this list
We tell studio administrators by email at least 30 days before adding a sub-processor that will handle customer content. A studio that objects on reasonable data-protection grounds can tell us at hello@letsjam.design, and we will work with it on an alternative or let it end its agreement.
Changelog
Oct 8, 2026 — First published.