Subprocessors
Effective date: December 11, 2025
To support the delivery of our Services, RaceDay may engage and use data processors, subcontractors or content delivery networks with access to or potentially have access to customer data (each, a "Subprocessor"). This page provides important information about the identity, location, and role of each Subprocessor.
Engaging subprocessors
RaceDay is committed to ensuring that all of its subprocessors have the appropriate legal and security safeguards in place to ensure that your data will remain protected to the highest standards. We are in the process of signing Data Processing Agreements (together with Standard Contractual Clauses, where applicable) with all of our subprocessors and ensuring they all have supplementary measures in place, where applicable.
Please see the below list of subprocessors that RaceDay has engaged with, the country they operate from, and the service(s) they provide.
| Subprocessor | Country | Service | Data processed | DPA signed | Subprocessor Measures |
|---|---|---|---|---|---|
| Vercel | USA | Cloud hosting and edge network | Application data, user content, IP addresses | Pending | Security & Compliance |
| Stripe | USA | Payment processing and subscription management | Billing contact name, email address, and card details | Pending | Security & Compliance |
| OpenAI | USA | AI-powered features and content generation | User-added content (when using AI features) | Pending | Security & Compliance |
| Supabase | USA / EU | Database and backend services | User data, application data, authentication data | Pending | Security & Compliance |
| Resend | USA | Email delivery service | Email addresses, email content | Pending | Security & Compliance |
Should RaceDay need to designate further sub-processors or make any change to the existing sub-processors, RaceDay will inform its customers and give customers ten (10) business days from giving notice to reasonably object to these changes.