Sub-Processor List
Third-party services Fieldday uses to process personal data.
Effective date: May 28, 2026 Last updated: May 28, 2026
Fieldday uses a small number of trusted third-party service providers ("sub-processors") to deliver the platform. A sub-processor is a company that processes personal information on Fieldday's behalf in order to provide part of the Service.
This page lists our current sub-processors, what each one does, and where it processes data. We keep this page up to date so our tenants and their players can see exactly who is involved in handling their information.
Fieldday is operated by KABOOM SG, located in Ontario, Canada.
Current sub-processors
| Sub-processor | Purpose | Data processed | Location of processing |
|---|---|---|---|
| Supabase | Database, authentication, and file storage | All platform data, including player and tenant records, and uploaded media | Canada and United States |
| Railway | Application hosting and background processing | All platform data in transit during processing | United States |
| Resend | Transactional and notification email delivery | Recipient name and email address, message content | United States |
| Twilio | SMS message delivery | Recipient phone number, message content | United States |
| Stripe | Payment processing, where a league charges fees | Billing contact details and payment information (card data is handled entirely by Stripe and is never stored by Fieldday) | United States and Canada |
| Cloudflare | DNS, content delivery, edge caching, and email routing | Technical request data, including IP addresses; inbound email to Fieldday addresses | Global edge network, including Canada and United States |
How we manage our sub-processors
Each sub-processor is bound by a written agreement requiring it to protect personal information and to use it only to provide its service to Fieldday. We select providers that maintain recognized security standards appropriate to the data they handle.
We review our sub-processor arrangements periodically as part of our security practices.
Cross-border processing
Some of our sub-processors process data outside Canada, primarily in the United States. Where this occurs, the data may be subject to the laws of the country where it is processed, including lawful access requests by foreign authorities. We take reasonable contractual and technical measures to ensure data receives a comparable level of protection wherever it is processed.
Changes to this list
We may add or replace sub-processors as the platform evolves. For tenants, changes to sub-processors that have access to tenant or player data are handled in accordance with the Data Processing Addendum, which provides advance notice and a right to object on reasonable privacy or security grounds.
We encourage tenants who wish to be notified of changes to this list to contact us at the address below to be added to our notification list.
Contact
Questions about our sub-processors can be directed to:
Fieldday Privacy Officer KABOOM SG Email: [email protected]