Sub-processors
Last updated: March 2026
This page lists the third-party companies ("sub-processors") that Ananda engages to provide its services. These companies process personal data on Ananda's behalf, under contracts that impose data protection obligations equivalent to those in our Data Processing Agreement .
Under our DPA, we notify studios at least 14 days in advance of any changes to this list.
Infrastructure & Hosting
| Provider | Purpose | Location | Safeguards |
|---|---|---|---|
| Hetzner Online GmbH | Cloud server hosting — all application data and databases are stored on Hetzner infrastructure | 🇩🇪 Germany / 🇫🇮 Finland (EU) | EU-based; GDPR applies directly. Privacy Policy ↗ |
Security & CDN
| Provider | Purpose | Location | Safeguards |
|---|---|---|---|
| Cloudflare, Inc. | DDoS protection, bot mitigation (Turnstile), DNS, and TLS termination | 🇺🇸 USA (global CDN) | Standard Contractual Clauses (SCCs). Privacy Policy ↗ · DPA ↗ |
Payment Processing
| Provider | Purpose | Location | Safeguards |
|---|---|---|---|
| Stripe, Inc. | Payment processing, subscription billing, and invoice management. Card details are tokenised and stored by Stripe — Ananda never stores raw card data. | 🇺🇸 USA / 🇮🇪 Ireland (EU) | SCCs; Stripe Ireland Ltd. acts as EU data controller for EU customers. Privacy Policy ↗ · DPA ↗ |
| PayPal Holdings, Inc. | Alternative payment method for studios and students that prefer PayPal. | 🇺🇸 USA / 🇱🇺 Luxembourg (EU) | SCCs; PayPal (Europe) S.à r.l. acts as EU entity. Privacy Policy ↗ |
Video Conferencing
| Provider | Purpose | Location | Safeguards |
|---|---|---|---|
| Zoom Video Communications, Inc. | Hosting online and hybrid classes. Used only when a studio enables the Zoom integration. Ananda stores only meeting IDs and join URLs; actual video/audio is processed by Zoom. | 🇺🇸 USA | SCCs. Privacy Policy ↗ · GDPR Commitment ↗ |
Transactional Email
| Provider | Purpose | Location | Safeguards |
|---|---|---|---|
| Mailgun Technologies, Inc. | Delivery of transactional emails: booking confirmations, class reminders, login links, and account notifications. Emails contain the recipient's email address and personalised content. | 🇺🇸 USA / 🇪🇺 EU region available | SCCs; EU data region used for EU customers. Privacy Policy ↗ · DPA ↗ |
Note for students
If you are a student using Ananda through your yoga or fitness studio, the studio is the data controller for your personal data. The above sub-processors act on Ananda's behalf as processor. For questions about how your data is used, contact your studio or refer to the Ananda Privacy Policy .
Contact
To object to the addition of a new sub-processor or for questions about data transfers, contact us at support@ananda.app .