Subprocessors
Effective and last updated: 30 September 2026
These are the companies that process personal information on our behalf to run TheProfitPath, what each one does and where it processes data. Organizations covered by the Data Processing Addendum can subscribe to changes by emailing [email protected]; we give at least 30 days' notice before adding a subprocessor that will handle their members' data.
1. Infrastructure and operations#
| Subprocessor | Purpose | Data | Location |
|---|---|---|---|
| Vercel Inc. | Hosting of the web application, serverless API functions and DNS | All data in transit, request logs (IP, user agent) | United States, EU edge regions |
| Cloudflare, Inc. | DNS, tunnel and edge protection for the API, status and cloud consoles | Request metadata (IP, headers) in transit | Global edge network |
| Virtual private server provider (EU data centre) | Runs the API server, PostgreSQL database, WebSocket gateway and background jobs | All account and journal data at rest (encrypted disks, encrypted backups) | European Union |
| Better Stack (Better Stack, Inc.) | Uptime monitoring and the public status page | Operational metrics; no personal data beyond the operator's own contact details | EU / United States |
2. Payments, email and media#
| Subprocessor | Purpose | Data | Location |
|---|---|---|---|
| Stripe, Inc. / Stripe Payments Europe Ltd | Subscription billing, AI credit purchases, invoices, billing portal | Name, email, payment card (held by Stripe only), billing address, transaction history | United States, Ireland |
| Resend, Inc. | Transactional and notification email, the support email channel | Email address, name, email content, delivery events | United States |
| Cloudinary Ltd. | Storage and delivery of uploaded screenshots, images and video | Uploaded media, upload metadata | United States, EU, Israel |
3. AI providers#
| Subprocessor | Purpose | Data | Location |
|---|---|---|---|
| OpenAI, L.L.C. | Premium model: chat, insights, reports, vision, voice turns | Prompts, selected journal context, conversation history, images | United States |
| Mistral AI SAS | Backup model inference and memory-search embeddings, speech recognition and synthesis for live voice, safety classification | Prompts, context, saved memory text, streamed audio during a call, safety case summaries | France (EU) |
| OpenRouter, Inc. | Free-lane model routing | Prompts and selected context | United States |
| NVIDIA Corporation | Free-lane model inference | Prompts and selected context | United States |
| Tavily, Inc. | Web search for research-backed answers | A search query derived from your request; no account data | United States |
No AI provider is permitted to train models on your content under our agreements with them.
4. Integrations you choose#
| Provider | When | Data | Location |
|---|---|---|---|
| Google LLC | If you sign in with Google | Google account id, name, email, profile image | United States |
| Notion Labs, Inc. | If you connect a Notion workspace | The pages and databases you select for import; an encrypted connection token | United States |
| External applications you give an API key | Until you revoke the key | The resources the key's scopes allow | Wherever that application runs |
5. Content loaded directly by your browser#
These providers are not processors for us; your browser contacts them directly when the content appears, and they see your IP address and device information under their own policies: TradingView (charts), Giphy and Tenor (GIFs in messages), Stripe (checkout and billing portal pages).
6. Market data sources (no personal data)#
Our servers fetch prices, candles, news and calendar events from Binance, Dukascopy, Yahoo Finance, Forex Factory / Fair Economy, FinancialJuice and similar public sources. These requests carry no information about you.
Who we are and how to contact us
TheProfitPath
The operator's registered name and postal address are being finalised and will be published here. Until then every notice below reaches the operator directly.
- Legal notices and disputes: [email protected]
- Privacy requests: [email protected] or the privacy request form
- Illegal content, abuse and copyright notices: [email protected] or the report content form
- Digital Services Act point of contact for authorities and users: [email protected] (English, Slovenian)
- Security vulnerabilities: [email protected]
- Everything else: contact support or the in-app support chat
All legal documents
- Terms of ServiceThe agreement that governs your account, subscriptions, AI features, community and the developer API.
- Privacy PolicyWhat personal information we collect, why, who receives it, how long we keep it and the rights you have wherever you live.
- Cookie PolicyEvery cookie and browser-storage key the Service sets, what it does and how to control it.
- Refunds, Cancellation and WithdrawalHow to cancel, when a refund applies, the 14-day withdrawal right for EU and UK consumers and the model withdrawal form.
- Acceptable Use and Community GuidelinesWhat you may not do on the Service, how content is moderated, how to report content and how to appeal a decision.
- AI Transparency NoticeHow the AI features work, which providers process your prompts, what is synthetic and what you should not rely on.
- Data Processing AddendumThe processor terms that apply when an organization uses the Service with its members' personal data.
- SubprocessorsThis page
- Accessibility StatementOur accessibility target, known limitations and how to report a barrier.
- Legal NoticeWho operates TheProfitPath, how to reach us for legal, privacy, copyright and safety matters, and the full list of legal documents.
- Report contentReport illegal content, abuse, impersonation or a copyright problem.
- Privacy requestExercise a data protection right without signing in.
- Cancel subscriptionCancel a paid plan without signing in.