Subprocessors
Last updated 2026-08-16
The companies that process TrainerCue customer data, what each one touches, and how to reach them. Changes are listed in the change log below; our DPA explains objection rights.
Infrastructure (all workspaces)
| Company | Service | Data it processes | Region | Privacy contact |
|---|---|---|---|---|
| Supabase Pte. Ltd. (Singapore) | Database, authentication, file storage | All workspace data at rest | United States | supabase.com/privacy |
| Vercel Inc. (US) | Application hosting and delivery | All data in transit; request logs (paths, IPs) | United States | vercel.com/legal/privacy-policy |
| Resend (Plus Five Five, Inc., US) | Transactional email | Notification emails: recipient address, subject, and body, which can include a lead's name and intake answers | United States | resend.com/legal/privacy-policy |
| Cloudflare, Inc. (US) | Turnstile bot check on public sign-in pages | A browser challenge; no workspace data | Global edge | cloudflare.com/privacypolicy |
Per-workspace integrations (only if the coach connects them)
| Company | Service | Data it processes | Privacy contact |
|---|---|---|---|
| Meta Platforms, Inc. (US) | Instagram messaging | Messages and comments for the connected account; replies sent. Meta is an independent controller under its own terms | facebook.com/privacy/policy |
| Google LLC (US) | Google Calendar | Calendar events read for display; task blocks written as events (titles can contain lead names) | policies.google.com/privacy |
| Calendly, LLC (US) | Booking intake | Booking events for the coach's leads (invitee name, email, answers) | calendly.com/legal/privacy-notice |
What is deliberately absent
No analytics, advertising, tracking, or session-replay vendor processes TrainerCue data, and none can be added silently: the application's Content-Security-Policy blocks requests to any host not listed here, and an automated test enforces that policy. We currently process no payments in-app; a payment provider will be added to this page before any checkout launches.
One transparency note: Supabase's own subprocessor list includes OpenAI, LLC for natural-language features of the Supabase platform. TrainerCue sends no customer data to any AI vendor.
Change log
- 2026-08-16: first published version of this registry.