Axceera (Pvt) Ltd. uses a small number of vendors to host, operate, secure, support, and bill for Sprint Track. This page is the authoritative list of those sub-processors, maintained as required by Article 28 of the GDPR and referenced by our Privacy Policy and Data Processing Agreement.
Change notice
We give customers at least 30 days' notice before adding or replacing a sub-processor. Notice is given through the service, by email to workspace administrators, or on this page. To be notified of changes, email hello@sprintrack.com and ask to be added to the sub-processor notification list.
Current sub-processors
| Sub-processor | Purpose | Processing location | Data processed | Transfer safeguard |
|---|---|---|---|---|
| Cloudflare, Inc. | Application hosting, database, object storage, vector search, job queues, CDN, and DDoS protection. Sprint Track runs entirely on this platform. | Global edge network | All customer workspace and application data, uploaded files, and service request logs | Standard Contractual Clauses; UK IDTA |
| Paddle.com Market Ltd. | Payment processing and Merchant of Record for paid plans and AI balance purchases | United States / European Union | Billing contact details, payment data, transaction and subscription records | Standard Contractual Clauses; UK IDTA |
| Sendinblue SAS (Brevo) | Transactional email delivery — verification codes, invitations, mentions, and security alerts | European Union | Recipient email address, message subject and body | Within the EEA; UK IDTA for UK transfers |
| Google LLC — Gemini API | AI feature inference, document summarisation, and embedding generation. Enabled per workspace; off unless an administrator turns AI features on. | United States | Prompts, grounding context, uploaded documents and audio sources, and text submitted for embedding | Standard Contractual Clauses; UK IDTA |
| Google LLC — OAuth | "Sign in with Google" authentication, where a user chooses it | United States | Email address, name, profile image, and the authentication assertion | Standard Contractual Clauses; UK IDTA |
| GitHub, Inc. | Repository and issue integration. Enabled per workspace; off unless an administrator connects it. | United States | Repository and issue data for connected repositories only | Standard Contractual Clauses; UK IDTA |
| OpenAI, L.L.C. | Delivery of the Sprint Track app inside ChatGPT. Applies only where a user connects Sprint Track to ChatGPT. Data flows to OpenAI as a result of that user's own request. | United States | Workspace, project, and issue data returned in response to the connected user's requests | Standard Contractual Clauses; UK IDTA |
Notes on scope
Always active. Cloudflare and Brevo process data for every customer. Paddle processes data for every paying customer.
Optional and off by default. Google Gemini, GitHub, and OpenAI process data only where a workspace administrator or user has explicitly enabled that capability. A workspace that never enables AI features sends no content to Google's Gemini API. A workspace that never connects GitHub sends nothing to GitHub.
Not a sub-processor. The Sprint Track coding runner executes on the developer's own machine. Provider credentials supplied to it stay on that machine and are never transmitted to Sprint Track or to any sub-processor.
No analytics vendor. Sprint Track uses no analytics, measurement, attribution, advertising, or session-replay vendor. There is no such sub-processor because there is no such processing.
Onward transfers and credentials
Where a customer connects a third-party service, the credentials for that connection are stored under envelope encryption. Each credential is encrypted with its own key, wrapped by a versioned root key, and cryptographically bound to the workspace, purpose, provider, and owning record — so a stored credential cannot be replayed into a different scope.
Contact
Questions about this list, or requests for the data processing terms we hold with any sub-processor:
Axceera (Private) Limited 157/3 Kadawatha Road, Nadimala, Dehiwala Sri Lanka
Email: hello@sprintrack.com