PicTrainerLegal
Subprocessors
Last updated 4 November 2026. PicTrainer is run by Gotoh Industries LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States.
These companies process personal data for PicTrainer, under contracts that bind them to protect it. The data processing terms let teams object to a new one: we’ll give 30 days’ notice here and by email to owners before adding or replacing one.
| Company | What they do for us | Data | Where |
|---|---|---|---|
| Supabase, Inc. | Database, sign-in and photo storage | Owners’ and managers’ emails; staff’s and guides’ first names, lessons finished and their phones’ anonymous IDs; teams’ spots, photos and rules; feedback sent from the app (the message, an email address if added, the screenshot) | Frankfurt, Germany (AWS eu-central-1) |
| Hetzner Online GmbH | The web servers that run this site and render printables | Everything the website handles, while it handles it | Nuremberg, Germany |
| Mailgun Technologies, Inc. (Sinch) | Sending email: sign-in links, invites, the Monday summary | Recipients’ email addresses and the email’s content | EU region (Germany) |
| Cloudflare, Inc. | Delivering the site safely: CDN, DNS, protection from attacks, the sign-in bot check | Visitors’ IP addresses and requests | Worldwide network |
| Google LLC (Google Analytics) | Counting visits to the website | Visitors’ pseudonymous identifiers and pages (addresses shortened; no names or emails). In the EEA, the UK and Switzerland, nothing is stored on the visitor’s device and only an anonymous count is sent unless they accept | United States and worldwide |
| Stripe, Inc. | Taking payment for plans | Owners’ billing details and payment cards; the pseudonymous Google Analytics ID of the visit that started a checkout | United States and worldwide |
Transfers outside the EU and UK rely on the EU–US Data Privacy Framework where the company is certified, and otherwise on the European Commission’s standard contractual clauses (with the UK addendum).