We have updated our list of Sub-processors, effective June 15, 2026. Your continued use of the website, app, and services on or after that date signifies your acceptance of the updated list of Sub-processors.
Sub-processors
Goosechase Adventures Inc. Sub-Processors
To support Goosechase in delivering the Service, Goosechase engages third-party service providers as sub-processors.
This page identifies the sub-processor, describes where they are located, and what services they provide to us.
Our business needs may change from time to time and Goosechase will periodically update this page to provide notice of additions and removals to our list of sub-processors.
Cross-border transfers. Where personal information is transferred from the European Economic Area, the United Kingdom, Switzerland, or Canada to the United States or other third countries, we rely on one or more of the following safeguards: (i) the European Commission's adequacy decision under the EU-US Data Privacy Framework where the recipient is self-certified, including the UK Extension and the Swiss-US DPF where applicable; (ii) the Standard Contractual Clauses adopted by the European Commission on June 4, 2021 (Decision (EU) 2021/914), supplemented by transfer impact assessments and additional technical and organizational measures as required; (iii) an adequacy decision under Article 45 GDPR (for example, the EU Commission Implementing Decision 2002/2/EC for Canada PIPEDA-regulated organizations); or (iv) any other valid Article 46 GDPR or UK GDPR mechanism. The specific mechanism for each sub-processor is identified in the table below. We have completed the Section 17 transfer assessment under Quebec Law 25 with respect to the sub-processors identified below; a redacted summary is available on request.
| Service Provider | Types of Personal Information Processed | Processor Activities | Location | Cross-border Transfer Mechanism |
|---|---|---|---|---|
| Amazon Web Services | Photo & video submissions (photo & video files), Emails, GPS & Text submissions, IP Addresses (logs). | Cloud-hosting | USA | EU-US DPF; SCCs Module 2/3 (per AWS DPA) |
| Anthropic | Prompts and outputs from Goosechase personnel; may include limited customer business information. | AI-assisted personnel productivity, in-product features, and customer support | USA | EU-US DPF; SCCs Module 2/3 (per Anthropic Commercial Terms / DPA) |
| AppFollow | Username or display names, Reviews and comments, ratings | Customer Support | USA, Europe | Intra-EEA processing (servers in Germany / Finland; AppFollow is a Finnish company); SCCs Module 2/3 (per AppFollow DPA) for non-EEA controller transfers |
| Asana | Internal task and project content; may reference customer accounts, school district names, or support escalations in task titles, descriptions, and comments. | Project management; engineering and operations workflow tracking; compliance backlog management. | USA | EU-US DPF; SCCs Module 2/3 (per Asana DPA) |
| Calendly | Email address, name | Scheduling meetings | USA | EU-US DPF; SCCs Module 2/3 (per Calendly DPA) |
| Canada Post | Name, email, address | Shipping services | Canada | EU adequacy decision (Canada Commission Implementing Decision 2002/2/EC for PIPEDA-regulated organizations); SCCs as backup |
| Chargebee | First name, last name, email address, job title, business name, business address (optional), phone number (optional), payment information | Subscription billing CRM | USA | EU-US DPF; SCCs Module 2/3 (per Chargebee DPA) |
| ClassLink | Identity assertion for student/educator authentication | Optional K–12 single sign-on (SSO) | USA | SCCs; intra-US for US K–12 customer districts. |
| Clever | Identity assertion for student/educator authentication | Optional K–12 single sign-on (SSO) | USA | SCCs Module 2/3 and UK IDTA (per Clever European DPA); intra-US for US K-12 customer districts. |
| DocuSign | Name, email, job title, business/company name, signature | Signing & Sending Agreements | USA | EU-US DPF; SCCs Module 2/3 (per DocuSign DPA) |
| Elastic | Email address, Username, IP addresses | Website Analytics | USA | EU-US DPF; SCCs Module 2/3 (per Elastic DPA) |
| IP addresses; ID numbers generated by Meta | Website analytics; Advertising | USA | EU-US DPF; SCCs Module 2/3 (per Meta DPA) | |
| Flurry | IP addresses; ID numbers generated by Flurry | Mobile analytics | USA | EU-US DPF; SCCs Module 2/3 (per Yahoo / Flurry DPA) |
| Google Ads | IP addresses; ID numbers generated by Google Ads | Website analytics; Advertising | USA | EU-US DPF; SCCs Module 2/3 (per Google Ads DPA) |
| Google Analytics | IP addresses; ID numbers generated by Google Analytics | Website analytics | USA | EU-US DPF; SCCs Module 2/3 (per Google Workspace DPA) |
| Google Apps | Customer name and email | Email service provider used as CRM, Collaboration suite, Drive, Calendar, Meet, and AI-assisted personnel productivity via Gemini integrated with Workspace. | USA | EU-US DPF; SCCs Module 2/3 (per Google Workspace DPA) |
| Granola | Customer call audio and transcripts; meeting metadata. | Customer call recording, transcription and summarization, subject to recording-consent procedures. | USA | SCCs Module 2/3 (per Granola DPA) |
| IP addresses; ID numbers generated by Meta | Website Analytics; Advertising | USA | EU-US DPF; SCCs Module 2/3 (per Meta DPA) | |
| Intercom (Fin) | Anything shared with our support team to better provide a contextual experience - e.g. first name, last name, email address, job title, business name, business address (optional), phone number (optional). | Customer marketing & support, including AI-assisted customer support via Intercom Fin AI (the AI nature of the conversation is disclosed to users at the start of the chat). | USA | EU-US DPF (DPF participant 5893); SCCs Module 2/3 (per Intercom DPA) |
| IPinfo | IP Addresses | Website Analytics | USA | SCCs Module 2/3 (per IPinfo DPA); |
| IP addresses; ID numbers generated by LinkedIn | Website analytics; Advertising | USA | EU-US DPF; SCCs Module 2/3 (per LinkedIn DPA) | |
| Metabase | IP addresses | Website analytics | USA | SCCs Module 2/3 (per Metabase Cloud DPA) |
| MineOS | Name, email | Account Deletion | USA | SCCs Module 2/3 (per MineOS DPA); UK IDTA / Addendum |
| Mixpanel | IP addresses | Website analytics | USA | EU-US DPF (DPF participant 7814); SCCs Module 2/3 (per Mixpanel DPA) |
| Notion | Internal documentation may contain (Company name and basic contact information) | Internal knowledge base | USA | EU-US DPF; SCCs Module 2/3 (per Notion DPA) |
| OpenAI | Chat messages and prompts entered by user; AI-generated responses, session activity. | AI mission suggestions; AI-assisted customer support drafting; AI verification for pricing-program eligibility (see Privacy Policy). | USA | EU-US DPF; SCCs Module 2/3 (per OpenAI Business / API DPA) |
| Pingdom | IP addresses; ID numbers generated by Pingdom | Website analytics | USA | SCCs Module 2/3 (pre-signed, per SolarWinds DPA); UK Addendum; Swiss Addendum |
| Quickbooks | Email address and payment information | Customer Payments | USA | EU-US DPF; SCCs Module 2/3 (per Intuit DPA) |
| Quo (formerly OpenPhone) | Phone numbers, voice audio, call recordings, voice memo transcripts | Outbound and inbound business voice calls; voice memo transcription | USA | SCCs Module 2/3 (per Quo DPA) |
| Rebrandly | General location information, browser data | Website analytics; Advertising | USA | SCCs Module 2/3 (per Rebrandly DPA) |
| IP addresses; ID numbers generated by Reddit | Website analytics; Advertising | USA | EU-US DPF; SCCs Module 2/3 (per Reddit DPA) | |
| Salesforce | Name, email, business phone number (optional), business address (optional) | Sales CRM | USA | EU-US DPF; SCCs Module 2/3 (per Salesforce DPA) |
| ScaleKit, Inc. | Identity assertion routing for Goosechase Studio (SAML and OIDC) | Single sign-on authentication broker | USA | SCCs Module 2/3 (per ScaleKit DPA); intra-US for US customer Workspaces |
| Segment | IP addresses; ID numbers generated by Segment; text submissions (text files) | Website analytics; Advertising | USA | EU-US DPF; SCCs Module 2/3 |
| Sendgrid | Name, email, and email analytics (messages opened) | Marketing CRM and marketing performance | USA | EU-US DPF; SCCs Module 2/3 |
| Sentry | Email address, Username, IP addresses | Mobile Analytics | USA | EU-US DPF; SCCs Module 2/3 (per Sentry DPA) |
| Slack | Internal team communications; customer messages may occasionally be forwarded into internal channels for support coordination. | Internal team communications and customer support coordination. | USA | EU-US DPF; SCCs Module 2/3 (per Salesforce / Slack DPA) |
| Sprout Social | Ad performance metrics; clicks, impressions, conversions | Website Analytics; Advertising | USA | EU-US DPF; SCCs Module 2/3 (per Sprout Social DPA) |
| Stitch | Email address, name, username | Analytics and reporting | USA | SCCs Module 2/3 (per Stitch / Talend DPA) |
| Stripe | Username, Emails, payment info | Payment processor | USA | EU-US DPF; SCCs Module 2/3 (per Stripe DPA) |
| Typeform | Names, emails, survey responses, feedback data | Online form creation, data collection, survey processing | USA | EU-US DPF; SCCs Module 2/3 (per Typeform DPA) |
| Workable | All info provided is optional: Name, email, resume | Job Postings | USA, Europe | EU-US DPF; SCCs Module 2/3 (per Workable DPA, with DPF / SCC fallback expressly stated) |
| X (Twitter) | General location information, browser data | Website analytics; Advertising | USA | EU-US DPF; SCCs Module 2/3 (per X DPA) |
| Zapier | Username, name and email | API Integration | USA | EU-US DPF; SCCs Module 2/3 (per Zapier DPA) |
Effective Date: June 15, 2026