Paced Paced
Privacy PolicyTerms of ServiceCookie PolicyAcceptable UseDPASubprocessorsSecurity & Trust
Back to app
Privacy PolicyTerms of ServiceCookie PolicyAcceptable UseDPASubprocessorsSecurity & Trust

Documents

Privacy PolicyTerms of ServiceCookie PolicyAcceptable UseDPASubprocessorsSecurity & Trust

Subprocessors

Effective: 22 July 2026 Last updated: 22 July 2026

Overview

Paced uses a small number of third-party services ("subprocessors") to deliver the platform. This page lists each subprocessor, their role, and where they process data.

We review our subprocessors regularly and update this page when they change. If you do not agree with our use of a subprocessor, you can stop using Paced and delete your account and data at any time from your account settings.

Current subprocessors

SubprocessorPurposeData processedProcessing locationTransfer mechanism
Google Firebase / Google Cloud
(Google LLC / Google Ireland Ltd)
Authentication and database (Cloud Firestore) for account, profile, ride, fitness, community, and referral dataName, email, authentication data, and the training data you log and record (including power, heart rate, and optional fitness measurements)United States (primary), EU/UK regional options availableGoogle Cloud DPA with SCCs / UK IDTA
Vercel Inc.Serverless compute and hosting for the Paced applicationRequest headers, IP addresses (transient), application code executionUnited States and edge locations globallyVercel DPA with SCCs
Stripe, Inc. / Stripe Payments EuropePayment processing and subscription management for paid plansBilling details, payment method (card data collected directly by Stripe), subscription and transaction recordsUnited States / EUStripe DPA with SCCs / UK IDTA

Content delivery networks

Our public web pages load web fonts and icons from third-party content delivery networks. When your browser fetches these files, your IP address is visible to the provider as a necessary part of delivering the asset. We do not send them any account or ride data, and we do not use these requests to identify or track you.

  • Google Fonts (Google LLC) — web font delivery.
  • Cloudflare cdnjs (Cloudflare, Inc.) — delivery of the Font Awesome icon library.

Notification of changes

We will update this page at least 30 days before adding a new subprocessor that processes personal data. If you do not agree with a change, you can delete your account and data at any time from your account settings.