Boom
  • For Schools
  • For Teachers
  • Training
  • Pricing
  • Blog
  • About
Login
Login

Subprocessor Disclosure
for the Boom Application

Modified on: May 12, 2025

Effective Date: July 1, 2025

  1. Boom App Subprocessors: These subprocessors may collect and store data about you on our behalf when you use the Boom App.
    Name Links to Policies Hosting Region Description
    Vimeo Vimeo United States Video hosting services. May collect personal data from students or adults if they watch an embedded video. We have signed a Data Processing Agrement for the EU.
    MongoDB Privacy
    Security
    United States Where data entered into or created by the Boom App is stored. Encrypted in motion and at rest. We have a signed BAA with MongoDB.
    AWS

    Privacy

    Security

    United States The MongoDB database is hosted on AWS.
    Microsoft Azure Microsoft Trust Center United States Replica of select adult and entity data for business operations, product improvement, and account management.
    Galaxy/Meteor Cloud

    Privacy

    Security

    Data Processing Agreement

    United States The Boom App that processes personal data is hosted here.
    HubSpot

    Data Processing Agreement

    Trust Center

    United States Used to support business operations, including account management, customer service, customer education, sales, and marketing. Some adult data is copied from MongoDB to HubSpot for these purposes. We have turned on GDPR controls.
    Freshworks

    Privacy

    Security

    United States Our historical customer service platform. Being replaced during 2025-2026 with HubSpot.
    MessageBird Data Processing Agreement United States Used to deliver transactional emails like receipts and confirmations.
    Braintree Privacy United States Used to accept payments from adult users.
    PayPal Privacy United States Used to pay Boom Cards publishers.
    Google Analytics G4 Privacy United States Web page visit analytics. We use analytics to understand how customers use our product. We have turned on GDPR controls.
    IPinfo.io Privacy United States High-level location insights derived from an IP address
    ActiveCampaign Privacy United States Customer education emails and newsletters. Legal and system notices.
  2. Integrated Subprocessors and Services:
    1. Some subprocessors only process your personal data if you (or the organization you work for) ask them to. We call these “integrated subprocessors.”

    2. You are solely responsible for your selection of an integrated subprocessor and should conduct your own due diligence to ensure the integrated subprocessor and the Boom App integration meet your needs. We are not responsible for the actions of integrated subprocessors.

    3. We support several authentication and rostering integrated subprocessors, like: Canvas, Classlink, Clever, Google, Schoology, Microsoft, and SAML. Others may be added from time to time. You can find links to connect the Boom App to your preferred integrated subprocessor in the Boom App.

      1. Canvas Users: If Entity allows integration to Canvas from its Boom user accounts, Entity must require its users to conform to the Instructure Acceptable Use Policy for items used with Canvas. The experience of Boom Cards from inside Canvas differs from the direct Boom Cards experience: it has some additional features, and other features are unavailable.
      2. Google Add-on Users: If Entity enables its Authorized users to use the Boom Cards Google Add-on, Entity's use is subject to the Google Add-on Terms of Service Addendum and all Google Terms and Policies referenced therein.
    4. We may block any authentication and/or rostering service at any time if we believe that the service poses a security or privacy risk.

    5. We reserve the right to reject or immediately delete any personal data (such as a middle name) delivered to us by an authentication or rostering services if we decide that we don't need that personal data to deliver the services.

    6. If you create Boom Cards decks, we allow you to embed video from some third party services. See our FAQs for currently supported providers. See our Public Author Terms of Service for rights needed for decks you sell. We reserve the right to block or remove access to videos if we deem the video service provider poses a security or privacy risk or other risk to Boom or our users. You are responsible for determining if the video subprocessor you wish to use meets your legal and policy requirements for delivering content to students, including requirements about sharing data, consent, and advertisements. 

stealthboomie

 

 
boomStar-medium-white

Copyright © 2025 Boom Learning

 

 

 

Boom Passport | DMCA | Privacy  | Terms & Trust Center

Available On:
Connect With Us: