Third-Party Services & Data Processing

Transparency regarding external providers, integrations, and data processors used by EliteCircle to deliver our membership platform, payment processing, analytics, and communication services.

All Essential Performance Marketing Support
Service Provider Category Purpose Data Processed Privacy Policy Opt-Out / Control
Stripe Essential Payment processing & billing management
Billing Address Card Token Transaction ID
stripe.com/privacy ↗ Required for service delivery
Amazon Web Services (AWS) Essential Cloud hosting, database storage, CDNs, and compute infrastructure
Account Data Learning Progress Uploads
aws.amazon.com/privacy ↗ Core infrastructure
Cloudflare Essential DDoS protection, SSL/TLS, DNS routing, and web security
IP Address Browser Fingerprint Log Files
cloudflare.com/privacypolicy ↗ Security requirement
Mixpanel Performance Product analytics, feature usage tracking, and UX optimization
Device ID Session Duration Feature Clicks
mixpanel.com/legal/privacy ↗ Manage via Cookie Settings
Google Analytics Performance Site traffic analysis, conversion tracking, and audience insights
Pages Viewed Referral Source Time on Site
policies.google.com/privacy ↗ optout.google.com ↗
SendGrid (Twilio) Marketing Transactional emails, newsletters, and membership notifications
Email Address Open/Click Events Preferences
twilio.com/legal/privacy ↗ Unsubscribe link in every email
Meta Pixel Marketing Ad performance measurement and audience retargeting
Pixel ID Page Events Ad Clicks
facebook.com/privacy/policy ↗ Manage via Ad Settings
Intercom Support Live chat, help center, and customer support ticketing
Chat Transcripts Support Tickets Account Tier
intercom.com/legal/privacy ↗ Opt-out in account settings
Vimeo Pro Essential Secure video hosting for paid course content
Playback Time Device Info Completion Status
vimeo.com/privacy ↗ Required for video delivery

🔒 Data Processing & Compliance Standards

EliteCircle acts as a Data Controller for member information and complies with GDPR, CCPA, and other applicable data protection regulations. All third-party services listed above operate as Data Processors under strict Data Processing Agreements (DPAs).

🌍 GDPR Compliance

EU/UK members enjoy full data subject rights. We maintain records of processing activities and conduct DPIAs for high-risk integrations.

🔐 SOC 2 & ISO 27001

Our core infrastructure and key vendors are certified under international security standards. Regular third-party audits are conducted.

📊 Data Minimization

We only share strictly necessary data with vendors. Pseudonymization and tokenization are applied wherever technically feasible.

🛡️ Breach Notification

We commit to notifying affected members within 72 hours of any confirmed data breach involving third-party processors.

Questions About Third-Party Data?

Our Privacy & Compliance team is available to review specific integrations, DPAs, or opt-out requests.

Contact Privacy Team →