Legal
Sub-Processors
Third-party services that help us deliver Campix. We update this list whenever we add or remove a sub-processor.
Last updated: October 12, 2026
Campix engages the third-party services listed below to operate, secure, and improve our platform. Each is bound by a data processing agreement (DPA) with confidentiality, security, and breach-notification obligations consistent with our Privacy Policy and applicable law (PIPEDA, GDPR, CCPA, PHIPA).
We'll update this page whenever we add or remove a sub-processor. To be notified of changes in advance, email privacy@campix.io and ask to be added to the sub-processor change notification list, we provide 30 days' notice before onboarding new sub-processors that handle customer personal data.
Current sub-processors
| Provider | Purpose | Data handled | Region |
|---|---|---|---|
| Stripe | Payment processing, Connect Express marketplace payouts, dispute handling | Cardholder name, billing address, payment method, charge amounts, dispute correspondence | United States, Canada |
| Supabase | Postgres database hosting, authentication, file storage | All application data including org records, camper profiles, enrollments, attendance, waivers, audit logs | United States, Canada |
| Resend | Transactional and broadcast email delivery | Recipient email address, message content, delivery metadata | United States |
| OpenAI | CampMate AI assistant (when the org has it on), and the AI writing and summary features when staff use them | Staff prompts, plus contextual camper data the prompt references (names, DOB, allergies, medical notes, guardian contact). We operate under Zero Data Retention where contractually available. | United States |
| Vercel | Application hosting, edge functions, build pipeline, and anonymous Web Analytics + Speed Insights (production and demo sites) | Request logs, IP addresses, runtime metrics. Web Analytics and Speed Insights are cookieless and aggregate, with no personal identifiers. Application data is not stored on Vercel. | United States, global edge |
| Sentry | Application error monitoring and performance tracing | Exception stack traces, request and route metadata, and breadcrumbs. Error events are passed through a personal-data scrubber before transmission. | United States |
| Cloudflare (Turnstile) | Bot protection on sign-up, password reset and contact forms | IP address, browser and device signals collected during the check. No camper, parent, or application data. | United States, global edge |
| cron-job.org | Triggers Campix's scheduled background jobs and monitors uptime | Job requests and short status replies (counts and errors). No camper or parent data. | European Union |
| Meta Platforms | Advertising and campaign measurement (Meta/Facebook Pixel) on our public marketing website only | Marketing-site visitor web data: pages viewed, referrer, IP address, and a device/ad identifier. No camper, parent, or application data. Not active inside the signed-in application. | United States |
| Google (Google Ads, YouTube) | Advertising and conversion measurement (Google Ads / gtag), and hosting the embedded product overview video (YouTube), both on our public marketing website only | Marketing-site visitor web data: pages viewed, referrer, IP address, and a device/ad identifier. For the embedded video, nothing is sent until a visitor presses play, at which point YouTube receives their IP address and basic device information. No camper, parent, or application data. Not active inside the signed-in application. | United States |