Subprocessors
Overview
Paced uses a small number of third-party services ("subprocessors") to deliver the platform. This page lists each subprocessor, their role, and where they process data.
We review our subprocessors regularly and update this page when they change. If you do not agree with our use of a subprocessor, you can stop using Paced and delete your account and data at any time from your account settings.
Current subprocessors
| Subprocessor | Purpose | Data processed | Processing location | Transfer mechanism |
|---|---|---|---|---|
| Google Firebase / Google Cloud (Google LLC / Google Ireland Ltd) | Authentication and database (Cloud Firestore) for account, profile, ride, fitness, community, and referral data | Name, email, authentication data, and the training data you log and record (including power, heart rate, and optional fitness measurements) | United States (primary), EU/UK regional options available | Google Cloud DPA with SCCs / UK IDTA |
| Vercel Inc. | Serverless compute and hosting for the Paced application | Request headers, IP addresses (transient), edge geolocation to country level (we receive only the country code, never the address it was derived from), application code execution | United States and edge locations globally | Vercel DPA with SCCs |
| Stripe, Inc. / Stripe Payments Europe | Payment processing and subscription management for paid plans | Billing details, payment method (card data collected directly by Stripe), subscription and transaction records | United States / EU | Stripe DPA with SCCs / UK IDTA |
Content delivery networks
Our public web pages load web fonts from a third-party content delivery network. When your browser fetches these files, your IP address is visible to the provider as a necessary part of delivering the asset. We do not send them any account or ride data, and we do not use these requests to identify or track you.
- Google Fonts (Google LLC) — web font delivery.
Optional connected services
Some integrations are not subprocessors — they are third-party services you choose to connect, acting as independent controllers of your data under their own privacy policies:
- Strava (Strava, Inc.) — if you connect your Strava account, Paced receives the profile and activity data you authorise there and imports it as rides. You can disconnect at any time from Settings, which revokes Paced's access; deleting your Paced account does the same.
Paced's AI and coaching insights are currently generated by our own engine on our infrastructure — no external AI provider processes your data. If that ever changes, the provider will be added to the table above with notice, as below.
Notification of changes
We will update this page at least 30 days before adding a new subprocessor that processes personal data. If you do not agree with a change, you can delete your account and data at any time from your account settings.