Sub-processors

Stride Technologies Limited runs Stride Hub. To provide it we use a small number of other companies. When one of them handles personal data for us, it is a sub-processor: it may use the data only to provide its service to us, under a written contract that meets the requirements of the GDPR.

Your account data, your organisation's records and the show system itself are held in the European Union: our application servers and databases run in Google Cloud's europe-west1 region in Belgium. One legacy function that sends text messages (sendSms) is also deployed in us-central1 (United States) until it is removed. Where a provider below may process data outside the European Economic Area, the safeguard column says how that transfer is protected.

How we use personal data, and your rights over it, are set out in our Privacy Policy.

Sub-processors

Companies that process personal data on our behalf

Provider	What they do for us	Personal data	Where	Safeguard
Google Cloud and Firebase: servers, databases and file storage Google Cloud EMEA Limited	Runs the Stride Hub app: application servers, scheduled jobs, the databases that hold accounts, organisations, horses, entries and results, and the storage for uploaded files and photos.	Everything you or your organisation store in Stride Hub, including the health and medical fields described in our privacy policy.	Application servers and databases: europe-west1 (Belgium). One legacy function that sends text messages (sendSms) is also deployed in us-central1 (United States) until it is removed. Uploaded files (documents, photos, invoices, waivers): held in europe-west1 (Belgium). Website hosting is served from Google's global network.	Google Cloud Data Processing Addendum, accepted at account creation
Firebase Authentication and App Check (Google) Google Cloud EMEA Limited	Signs you in (email and password, phone number, Google and Apple sign-in), sends phone sign-in codes, and checks that requests come from a genuine Stride Hub app.	Email address, phone number, name, sign-in identifiers, IP address, device and app attestation data.	Firebase Authentication runs only in United States data centres. App Check: Google's global network.	EU-US Data Privacy Framework and Standard Contractual Clauses
Firebase Cloud Messaging (Google) Google Ireland Limited	Delivers push notifications to the app and to web browsers you allow.	Device push token, notification title and short text. We keep message contents, amounts other than your own refunds, and health data out of notifications.	Google's global network	Google Cloud Data Processing Addendum, accepted at account creation
Google Vertex AI (Gemini models) Google Cloud EMEA Limited	Powers Sam, the Stride Hub assistant, and reads photographed score sheets for show organisers.	What you ask Sam, the organisation records Sam looks up to answer you, and score-sheet images (rider, horse and score details).	EU regions only. Requests go to europe-west1 (Belgium) by default; our code refuses any region outside an EU member state.	Google Cloud Data Processing Addendum, accepted at account creation. Google does not use this data to train or fine-tune its models without our permission (Google Cloud Service Specific Terms, "Training restriction").
Google Maps Platform Google Ireland Limited	Turns a yard or venue address into map coordinates and works out driving time to a show.	The address typed in, and yard and venue coordinates.	Google's global network	Google Maps Platform terms: https://cloud.google.com/maps-platform/terms
Stripe Stripe Payments Europe, Limited	Takes card payments for show entries, bookings, shop orders and subscriptions, pays organisations out, and handles refunds.	Name, email address, payment amounts and history. Card details are entered directly with Stripe and never reach Stride Hub. For organisations that take payments: business, owner identity and bank details, collected by Stripe during payout onboarding.	Ireland.	Stripe Data Processing Agreement, accepted at account creation. EU-US Data Privacy Framework and Standard Contractual Clauses.
Amazon Web Services (Amazon SES and SNS) Amazon Web Services EMEA SARL	Sends account, booking, entry and receipt emails, receives replies to organisation messages so they appear in the conversation, and delivers messages sent through our support form to our support mailbox.	Email address, name, email content and delivery events (sent, bounced, complained).	eu-west-1 (Ireland).	AWS GDPR Data Processing Addendum, accepted at account creation
Twilio Twilio Ireland Limited	Sends text messages for booking and lesson reminders and for organisations' SMS campaigns.	Mobile phone number and message text.	United States (text messages are processed in the US region by default).	Twilio Data Protection Addendum, accepted at account creation. Twilio Binding Corporate Rules, EU-US Data Privacy Framework and Standard Contractual Clauses.
Sentry Functional Software, Inc. (Sentry)	Records errors in the web app and on our servers so we can fix them.	Error details, browser and device type, and the account and organisation identifiers involved. We switch off Sentry's default collection of personal data.	EU region (Frankfurt, Germany). Error reports are kept for 90 days.	Sentry Data Processing Addendum, accepted at account creation
Plausible Analytics Plausible Insights OÜ (Estonia)	Counts visits to the public stridehub.app website pages, without cookies.	Page address, referring site, browser, operating system, device type and country, derived from the IP address and browser details of a visit.	Germany (EU only).	Plausible Data Processing Agreement, accepted at account creation
Google Workspace (our support mailbox) Google Cloud EMEA Limited	Hosts the hello@stridehub.app mailbox that receives messages sent through the support form, privacy requests and emails to Stride Hub, and our replies.	The name, email address, organisation name and message you send us, and our reply.	Europe.	Google Cloud Data Processing Addendum, accepted at account creation

Services your browser or device contacts

Some services are loaded directly by your browser or phone while you use the Stride Hub app, so they receive your IP address and basic browser or device details. The public stridehub.app website pages do not load any of these.

Services contacted directly by the app on your browser or device

Provider	What they do for us	Personal data	Where	Safeguard
Google Fonts Google Ireland Limited	Supplies the typefaces the web app uses.	Your IP address and browser details, as part of the font request.	Google's global network	Google Fonts privacy information: https://fonts.google.com/faq (privacy section)
Google reCAPTCHA Google Ireland Limited	Helps App Check confirm the web app is being used by a person rather than an automated script.	IP address, browser and interaction signals. It sets a cookie named _GRECAPTCHA.	Google's global network	Google Terms of Service: https://policies.google.com/terms and Privacy Policy: https://policies.google.com/privacy
OpenStreetMap The OpenStreetMap map tile service (no contracting entity)	Supplies the map tiles on the web app's network map.	Your IP address and browser details, as part of each map-tile request.	Tile servers in the United Kingdom and Europe.	OpenStreetMap tile usage policy: https://operations.osmfoundation.org/policies/tiles/ and privacy policy: https://osmfoundation.org/wiki/Privacy_Policy
Apple (iPhone and iPad only) Apple Distribution International Limited	Sign in with Apple, delivery of push notifications to iOS devices, and App Attest checks.	Apple sign-in identifier and, if you share it, email address; device push token; device attestation data.	Europe and global.	Apple developer terms: https://developer.apple.com/support/terms/

Services an organisation chooses to connect

An organisation can connect its own accounting software (Xero, QuickBooks, Sage) to Stride Hub. The organisation chooses that service and has its own agreement with it, so it is not our sub-processor. Invoice and payment data is sent to it only after the organisation connects it, and stops when the organisation disconnects it.

Organisations that take payments through Stride Hub also hold their own account with Stripe, under Stripe's terms.

Changes to this list

We update this page before we start using a new sub-processor. Organisations get 30 days' notice by email before we start using a new sub-processor, and may object by cancelling their subscription.

Questions

Email hello@stridehub.app, or write to Stride Technologies Limited, 2 Kindlewood, Fire Castle Lane, Kildare Town, Co. Kildare, R51 CY22, Ireland.