Sub-processor List

Last updated: April 21, 2026

SubPro (operated by Let's BJJ Inc.) engages the following third-party sub-processors to deliver the Service. This list is maintained in accordance with Article 28 of the GDPR and equivalent provisions in the UK GDPR, Brazilian LGPD, and California CCPA.

The full contractual terms governing the relationship between SubPro (Processor) and each Academy Owner (Controller) are set out in the Data Processing Agreement.

Current Sub-processors

Sub-processor	Purpose	Location	Transfer Mechanism
Cloudflare, Inc.	Infrastructure (Workers), CDN, database (D1), file storage (R2), DNS, WAF	Global (US HQ)	EU/UK SCCs (2021)
Stripe, Inc.	Payment processing, subscription billing, Connect Express account management, Stripe Managed Risk for dispute handling	United States	EU/UK SCCs (2021)
Mux, Inc.	Video hosting, encoding, adaptive bitrate streaming, signed playback URLs, viewer analytics	United States	EU/UK SCCs (2021)
Resend, Inc.	Transactional email delivery (account verification, password reset, owner notifications, newsletters)	United States	EU/UK SCCs (2021)

Data Deletion Downstream

When an End User deletes their account (via Account > Delete Account) or the Controller initiates a deletion request, SubPro instructs each sub-processor to delete viewer-level Personal Data as follows:

Cloudflare D1 / R2: Immediate deletion from active systems. Backup rotation completes within 90 days.
Mux: Viewer-level analytics are deleted within 30 days via the Mux Data API.
Stripe: Customer records are deleted subject to Stripe's own retention policies required for regulatory and anti-fraud compliance (typically 7 years for transaction records).
Resend: Transactional email logs retained per Resend's standard retention window (typically 30 days).

Change Notifications

SubPro will notify the Controller (Academy Owner) at least 30 days before engaging a new sub-processor or replacing an existing one. Notifications are sent to the email address on file for the Academy Owner and posted on this page. If the Controller objects to a proposed change, they may terminate the Service before the new sub-processor is engaged.

Contact

For questions about sub-processors, or to request copies of the Standard Contractual Clauses (SCCs) in force for any transfer listed above, email privacy@sub-pro.net.