RollTrackApp uses the companies below to run the Service. Each one handles data only to do the job listed, under a contract that limits its use of the data. This list is referenced by Section 4 of the Privacy Policy and by the Data Processing Addendum.
Current sub-processors
| Sub-processor | Purpose | Data involved | Location |
|---|---|---|---|
| Stripe, Inc. | Payment processing, saved payment methods, Stripe Connect onboarding for gyms | Billing name, email, payment status, Stripe customer and account IDs. Card numbers are entered with and held by Stripe. | United States |
| Vercel, Inc. | Hosting of the web application and its server functions | All data passing through the Service | United States |
| Amazon Web Services, Inc. (S3, CloudFront) | Storage and delivery of uploaded files | Photos, gym logos, signed documents, attendance-card templates, CSV imports | United States |
| DigitalOcean, LLC (Spaces) | Storage of uploaded files | Photos, gym logos, signed documents, CSV imports | United States |
| Resend, Inc. | Sending account, billing, verification, and gym-to-member emails | Recipient name, email address, message content, delivery and unsubscribe status | United States |
| Sentry (Functional Software, Inc.) | Error monitoring and diagnostics | Technical error data, which may include account identifiers | United States |
Stripe's separate role
Gyms collect membership payments through their own Stripe account. For that payment data, Stripe acts under its own privacy policy and the gym's agreement with Stripe, not only as RollTrackApp's sub-processor.
Changes to this list
We update this page when a sub-processor is added, replaced, or removed. Gym Owners who have signed the Data Processing Addendum receive notice of material changes and may object on reasonable grounds within 30 days of the notice.
Questions
Contact privacy@rolltrackapp.com with any question about this list.