Sub-Processor List

Last Updated: April 8, 2026


Credible Inc. d/b/a McCoy uses the following third-party services (“sub-processors”) that may process personal data on our behalf. This list is updated when we add or remove sub-processors.

Vendor Service Data Received Location Privacy Policy
AWS Cloud infrastructure, storage, CDN All platform data (media files, database records, application logs) USA aws.amazon.com/privacy
Firebase / Google Authentication, crash reporting (Android) Auth tokens, crash logs (Android only) USA/Global policies.google.com/privacy
Anthropic AI text generation (McCoy IQ and consumer app) Role descriptions, challenge scripts, content inputs, career profile data, conversation context USA anthropic.com/privacy
OpenAI Text-to-speech audio (McCoy IQ and consumer app) Text content for speech synthesis USA openai.com/privacy
JobData API Third-party job listings data (consumer app) Job search parameters (title, location, skills, experience level) USA/Global jobdataapi.com/privacy-policy
HeyGen AI avatar video generation (McCoy IQ) McCoy IQ User-authored video scripts USA heygen.com/privacy-policy
Stripe Payment processing (McCoy IQ) Billing contact info, subscription data USA stripe.com/privacy
OneSignal Push notifications (mobile app) Email, first/last name, profile completion status USA onesignal.com/privacy_policy
Meta (Facebook SDK) iOS app SDK — auto-logging disabled App events (auto-logging disabled; sharing-only SDK) USA facebook.com/policy
TikTok iOS video sharing SDK Video content + device metadata (sharing-only, no behavioral tracking) USA/Global tiktok.com/legal/privacy-policy
Slack Internal operations and support Account event notifications (name, email, content of reports) USA slack.com/trust/privacy

McCoy has executed Data Processing Agreements (DPAs) with all vendors listed above. DPAs are available upon request at privacy@mccoy.io.

To be notified of changes to this sub-processor list, contact privacy@mccoy.io.


← Back to Privacy Policy