Version: 1.0
upcoach LLC uses a number of third-party service providers (“sub-processors”) to help us deliver the upcoach platform. This page lists them, what they do for us, where they process data, and on what legal basis.
We maintain this page as the authoritative current list. When a sub-processor changes, we update this page and note it in the changelog at the bottom. Customers who want to stay informed can bookmark this page and check the changelog periodically. Questions about any entry on this page: [email protected].
What counts as a sub-processor. A sub-processor is a third-party service that processes personal data on our behalf to help us deliver upcoach to you. We’ve organized them by purpose. For each entry we note what they do, what categories of data they touch, where they process it, and the legal transfer mechanism we rely on if the data leaves your country.
What’s not on this list. Internal tools we use to build and run upcoach (source code hosting, issue tracking, our own team communications) are not sub-processors of customer data — they don’t receive your personal data. Self-hosted components running on our own infrastructure (for example, our visitor counter) aren’t sub-processors either, because no third party receives the data.
Transfer mechanism. Where a sub-processor processes data outside your country, we rely on EU Standard Contractual Clauses (SCCs) and/or the EU-US Data Privacy Framework (DPF) where applicable, combined with each provider’s own contractual commitments. For integrations that you authorize yourself through OAuth (e.g., connecting your Google or Microsoft calendar), the legal basis is your consent granted at authorization time rather than a contracted sub-processor relationship.
We use Stripe for subscription billing (upcoach’s own subscriptions) and Stripe Connect for coaches to sell their offerings through upcoach checkout. Stripe handles payment card data directly; upcoach does not store card numbers. For failed-payment recovery on upcoach’s own subscriptions, we use ProfitWell Retain, which only activates in dunning contexts.
| Sub-processor | What they do | Data categories | Location | Transfer mechanism |
|---|---|---|---|---|
| Stripe, Inc. (including Stripe Connect) | Subscription billing, checkout, payouts to coaches | Name, email, billing address, payment card tokens, transaction metadata | United States, with EU processing for EU customers | SCCs and/or DPF |
| ProfitWell (Paddle, Inc.) — Retain | Failed-payment recovery for upcoach subscriptions | Email, subscription status, payment failure metadata | United States | SCCs and/or DPF |
| Sub-processor | What they do | Data categories | Location | Transfer mechanism |
|---|---|---|---|---|
| Resend | Transactional email delivery | Email address, email content | United States | SCCs and/or DPF |
| Sub-processor | What they do | Data categories | Location | Transfer mechanism |
|---|---|---|---|---|
| Intercom, Inc. | Support chat, product messaging, customer communications | Email, name, organization, conversation content, usage metadata | United States (EU region available) | SCCs and/or DPF |
| Calendly, LLC | Demo booking on marketing site | Name, email, event details | United States | SCCs and/or DPF |
| Sub-processor | What they do | Data categories | Location | Transfer mechanism |
|---|---|---|---|---|
| Mixpanel, Inc. | Product usage analytics inside the upcoach web application | User ID, behavioral events, usage metadata | United States | SCCs and/or DPF |
| Functional Software, Inc. (Sentry) | Error and exception tracking | Stack traces, limited request context, user identifier | United States | SCCs and/or DPF |
| Sub-processor | What they do | Data categories | Location | Transfer mechanism |
|---|---|---|---|---|
| Cloudflare, Inc. | Hosting (marketing site), content delivery, R2 object storage for user uploads | User uploads, site traffic metadata | Marketing-site edge: global. R2 object storage: Eastern North America (ENAM). | SCCs and/or DPF |
| Bunny.net | Video hosting (Stream) and CDN delivery | Uploaded videos, thumbnails, playback metadata | Video storage: Frankfurt (EU). CDN delivery: North America primary. | SCCs and/or DPF for North America delivery; Frankfurt storage is EU |
| Pusher, Ltd. | Realtime broadcast for in-app events | Event payloads, user identifier | EU (primary cluster) | EU — no extra-EU transfer needed |
upcoach uses AI models from the providers below to power features like AI-assisted suggestions and content generation. The providers below are in production use at the time of publication. We do not use customer data to train AI models. We may add or change AI providers over time; when we do, we’ll update this page.
| Sub-processor | What they do | Data categories | Location | Transfer mechanism |
|---|---|---|---|---|
| Anthropic, PBC | AI model provider (Claude) for AI-assisted features | User prompts and related content; provider does not train on inputs under their API terms | United States | SCCs and/or DPF |
| OpenAI, L.L.C. | AI model provider for AI-assisted features | User prompts and related content; provider does not train on API inputs under their terms | United States | SCCs and/or DPF |
These services are connected by you (or by your organization’s members) through OAuth authorization. When you connect a calendar, you’re granting us access to read and write to your own calendar using your own credentials. The provider is acting on your authorization, not as a contracted sub-processor of upcoach. We’ve listed them here for transparency.
| Service | What the integration does | Data categories | Transfer basis |
|---|---|---|---|
| Google Calendar (Google LLC) | Push scheduled events to your calendar; check availability | Calendar events, availability, email associated with the Google account | Your own OAuth authorization |
| Microsoft Calendar (Microsoft Corporation) | Push scheduled events to your calendar; check availability | Calendar events, availability, email associated with the Microsoft account | Your own OAuth authorization |
| Sub-processor | What they do | Data categories | Location | Transfer mechanism |
|---|---|---|---|---|
| Rewardful, Inc. | Affiliate attribution — only activates when a visitor arrives with an affiliate referral link | Referral identifier, email on conversion | United States | SCCs and/or DPF |
Plausible Analytics. We use Plausible for visitor counting on our marketing site, but we run it on our own infrastructure at upcoach.com/upcoach-wa/. Because the data stays with us and no third party receives it, Plausible is not a sub-processor.
Internal tooling. Services we use to build and operate upcoach — source code hosting, issue tracking, our team’s own communications, our deployment platform — do not process your personal data and are not on this list.
We update this page whenever we add, remove, or materially change a sub-processor. The date at the top of this page reflects the last such update.
If you have a concern about a specific sub-processor, or about a new one we’ve added, contact [email protected]. We’ll work in good faith to address it — this may include providing additional information, offering a workaround, or, in exceptional cases, discussing termination of your subscription.
Questions about this page or our sub-processors: [email protected]
Start building better coaching experiences with upcoach today.
Choose which categories of cookies you allow. You can change this any time at /cookie-preferences.
Strictly necessary
Required for the site to work. These run our hosting, remember your consent choice, protect against fraud, and power features you explicitly request (like opening the chat widget or booking a demo). Always on.
Analytics
Helps us understand how visitors use the site so we can improve it. Off by default.
Marketing
Used for advertising and measuring campaign effectiveness. Off by default.
