Subprocessors
Last updated: February 12, 2026 · Draft — attorney review pending
These are the third-party processors that operate CoachIQ on our behalf. We choose partners that provide security, privacy and reliability. If we add or replace a subprocessor, we will update this page.
| Processor | Purpose | Data touched | Region |
|---|---|---|---|
| OpenAI (via Emergent LLM proxy) | AI/LLM inference used to generate coaching content (practices, growth stories, Coach DNA, chat). | Anonymised player labels (e.g. #7 M), team age group (for age-appropriate coaching), formation preferences, your own reflections and game notes. No full player names, no photos, no contact info. | United States |
| Google (Sign-In only) | Emergent-managed Google OAuth session exchange, only used if you choose to sign in with Google. | Google account email, name, and profile picture. | Global |
| Emergent Object Storage | Storage of files, photos and clips you upload. Player-linked media is always private. | The file bytes you upload plus minimal metadata (filename, mime type, size, owner). | United States |
| MongoDB Atlas | Primary application database. | All CoachIQ records described in the Privacy Policy. | United States |
| Stripe | Payment processing (only active when the payments feature flag is on). | Purchase amount, plan, and Stripe customer ID. Card numbers are handled directly by Stripe, not by CoachIQ. | Global |
| Emergent hosting / infrastructure | Application hosting and delivery. | Request metadata (IP, user agent) used for security and rate limiting. | United States |
| Resend or SendGrid (planned) | Transactional email delivery (welcome, receipts, security notices). Currently the mailer runs in log-only mode. | Your email address and the message content. | United States |
Questions? privacy@uphauslabs.com