Sub-processors

Last updated: 4 July 2026

Where RinkTracker processes personal data on behalf of a club (see the privacy policy for how the controller and processor roles work), we use a small number of specialist providers — sub-processors — to deliver parts of the service. Each is bound by a data-processing agreement, and we only send a provider the data its job requires.

Current sub-processors

• Supabase (supabase.com) — Database, authentication and file storage for club workspaces.
• Vercel (vercel.com) — Application hosting and content delivery.
• Resend (resend.com) — Transactional email — invites, notifications and account emails.
• Mux (mux.com) — Video processing and streaming for game and practice footage.
• GoCardless (gocardless.com) — Direct Debit payment collection (also a controller for its own payment processing).
• Vercel AI Gateway (model providers) (vercel.com/ai-gateway) — AI drafting when a coach requests it — report polish and practice-plan drafts.

AI processing, specifically

AI features are assistive and coach-initiated: nothing is sent to a model unless a coach asks for a draft or a polish, and the coach approves the result before anyone else sees it. We do not use club data to train models.

Locations and transfers

Hosting regions and international-transfer safeguards for each provider are set out in that provider's data-processing terms. For our current configuration — including where a club's workspace data is hosted — email privacy@rinktracker.com and we will provide the detail in writing.

Changes to this list

When we add or replace a sub-processor that handles club data, we update this page and give account owners reasonable advance notice so they can raise objections before the change takes effect.