These providers process personal data on HEATCOACH’s behalf. We will update this page at least 30 days before adding a sub-processor that processes coach Client Data (see the DPA). Questions: [email protected].
| Provider | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Supabase Inc. | Database, authentication, file storage, edge functions | USA (AWS) | DPA with SCCs; encryption at rest |
| Vercel Inc. | Application hosting & delivery; cookieless traffic/performance analytics | USA / global edge | DPA with SCCs; EU-U.S. DPF |
| PostHog Inc. | Product analytics & session replay (only for users who opt in) | USA | DPA with SCCs; EU-U.S. DPF certified |
| Functional Software, Inc. (Sentry) | Error monitoring; session replay only after opt-in | USA | DPA with SCCs |
| Stripe, Inc. | Subscription payment processing | USA / EU | DPA; EU-U.S. DPF certified |
| Upstash, Inc. | Rate limiting (abuse protection) | USA / global | DPA with SCCs |
| Google LLC | Optional Google sign-in | USA / global | EU-U.S. DPF certified |