Last Updated: September 29, 2026
This page lists the third-party service providers ("subprocessors") that The Art of Practice uses to deliver the Service. Each provider only receives the data needed to perform the function described, and each operates under its own contractual and legal commitments to data protection.
This list is referenced by, and forms part of, our Data Processing Agreement and our Privacy Policy. We update it whenever we add or remove a provider that handles personal data.
| Provider | Purpose | Data Categories | Processing Region |
|---|---|---|---|
| Replit | Application hosting, database, sessions, object-storage sidecar | Everything the app stores: account, practice, community and purchase data; server logs (email addresses masked); uploaded object paths | United States |
| Stripe | Payment processing, subscription billing, coach payouts (Stripe Connect), webhook delivery | Name, email, billing/shipping address, payment method details, transaction history, customer and subscription identifiers, the renewal and consent terms recorded with a subscription | United States, with global processing under Stripe’s standard contractual safeguards |
| Sign-in (OAuth); Cloud Storage for uploaded files; the Gemini API for AI features (Practice Advisor, auto-organize, the in-app AI assistant chat) | Google account ID, email and name (OAuth); uploaded file contents and metadata; the practice data and messages a feature needs to answer (no account email or payment data) | United States; multi-region storage under Google’s standard contractual clauses | |
| Anthropic | LAIDO AI, the AI coach (Claude models) | The messages you send the coach and the practice data it needs to answer (skills, sessions, reviews, clips you send it); no payment data | United States |
| ElevenLabs | Spoken narration of the app tour | The fixed tour script only; no personal data | United States |
| Zoho Mail | Our SMTP mail server: transactional email (verification, password reset, notifications, billing notices) and invitations | Recipient email address, sender, subject, message body | European Union |
| Resend | Email delivery for the course, book and admin messages, the launch email and admin broadcasts | Recipient email address, subject, message body; delivery, bounce, complaint, open and click events | United States |
| MailerLite | Marketing email sequences and newsletters (managed outside the application); opt-outs are synced both ways | Subscriber email address, name, groups, and delivery/engagement events | European Union |
| GoHighLevel | CRM (contact records and campaign management); opt-outs are passed on as Email DND | Email address, first and last name, subscription tier, practice disciplines | United States |
| Számlázz.hu (KBOSS.hu Kft.) | Hungarian electronic invoicing for purchases | Buyer name, country, postal address, email, items bought and amounts | Hungary (European Union) |
| Bunny.net (BunnyWay d.o.o.) | Video streaming for course lessons | Your IP address and playback requests when you watch a lesson | European Union, with a global delivery network |
| Wistia | Video hosting for course and testimonial videos | Your IP address and playback events when you play one of these videos | United States |
| Render | Hosting for our book-delivery service | The buyer’s email address and what they bought, to issue download links | United States |
| Lulu | Print-on-demand fulfillment (printing and shipping physical books) | Buyer name and shipping address | United States |
| Meta Platforms (Meta Pixel) | Advertising measurement on the Accelerator checkout page, only after you press Accept in the cookie banner | Page views and purchase events with the amount, your IP address and browser identifiers | United States / Ireland |
| Spotify | Practice-music playback (only if you connect your Spotify account) | Spotify user identifier and OAuth tokens for the permissions you authorize | United States |
| Giphy | GIF search in direct messages | The search words you type and your IP address when GIFs load | United States |
| PostHog and Sentry | Server-side monitoring of the AI coach, where switched on | Pseudonymous usage events (PostHog); error reports and stack traces (Sentry); no names or emails | United States |
| Web Push services (browser/OS vendors) | Delivery of push notifications you have opted into (Apple, Google, Mozilla, Microsoft push endpoints) | Push subscription endpoint and message payload | United States |
Some pages show content hosted elsewhere. Those services act on their own terms when your browser loads it, and each receives your IP address and browser details: YouTube players and search (see the YouTube privacy notice), Vimeo and Instagram posts embedded in community posts, and thenaturalsmethod.com and theartofpractice.com, our own sites, which hand over purchases made there. Voice input in onboarding uses your browser’s own speech service (Google in Chrome, Apple in Safari). Web fonts are served by the app itself. Scripts from other services load only where they are needed: Stripe’s payment form on checkout pages, and the Meta Pixel after you accept it.
We no longer use ipapi (location lookup) or Zapier (automation); both were removed.
We update this page whenever we add a new subprocessor that handles personal data or remove an existing one. The “Last Updated” date at the top reflects the most recent change.
If you would like to be notified of material changes to this list in advance (for example, because you have signed a Data Processing Agreement with us as a Studio owner or as a Coach), please email support@theartofpractice.com and we will add you to the notification list.
Questions about a specific subprocessor or about our data-processing arrangements:
support@theartofpractice.com