Sub-processors
We use the third-party providers below to operate the platform. Each is bound by data-protection terms consistent with our Data Processing Agreement. We update this list when sub-processors change.
| Provider | Purpose | Location |
|---|---|---|
| Vercel | Application hosting, CDN + file storage (Blob) | USA / Global edge |
| Cloudflare R2 | Large-file / media object storage | Global |
| Neon | PostgreSQL database | EU (eu-west-2) |
| Clerk | Authentication + user management | USA |
| Stripe | Payment processing | USA / EU |
| Amazon SES | Email delivery | USA / EU |
| Resend | Transactional + marketing email delivery | USA |
| Inngest | Background jobs + automation processing | USA |
| Cloudflare Stream | Video hosting + streaming | Global |
| Cloudflare Turnstile | Bot protection on public forms (IP + browser signals) | Global |
| Iubenda | Consent management platform + cookie/privacy policy hosting (only when a creator connects their own Iubenda account) | EU (Italy) |
| Sentry | Error monitoring + session replay (consent-gated) | USA |
| PostHog | Product analytics (consent-gated) | USA / EU |
| Meta (Facebook) | Advertising conversion measurement (consent-gated pixel + CAPI) | USA |
| TikTok | Advertising conversion measurement (consent-gated pixel + Events API) | USA / Global |
| Analytics / advertising measurement (GA4, consent-gated) | USA | |
| Calendly | Lesson booking calendar (loads only when the visitor clicks to load it) | USA |
Last updated when this list changes. Transfers outside the EEA rely on Standard Contractual Clauses or equivalent safeguards.