Practilium

Subprocessors

Last updated: October 31, 2026

We update this page before a new subprocessor starts processing personal data, and we change the date above. To be told about a change, write to privacy@practilium.com.

This page lists the providers that process personal data for Practilium. Core processors act on our instructions. Advertising partners are listed separately, because Google Ads and Meta act as independent controllers for advertising data.

Also read the Privacy Policy and the Cookie Policy.

Core processors

These providers process personal data to run the service, payments, support and measurement that does not use advertising cookies. Vercel Analytics is cookieless and aggregated. Electronic signatures use Documenso Community Edition, open-source software we host ourselves on Pyrmont's own Vercel account. That software is not a separate subprocessor, and Documenso, Inc. does not process the data.

Subprocessor	Legal entity	Purpose	Data categories	Data subjects	Processing location	Transfer mechanism	Role
Amazon Web Services (AWS)	Amazon Web Services, Inc.	Hosting, sign-in with Amazon Cognito, email with Amazon SES, storage and backups.	Account data, study content, logs, and the content of email we send.	Account holders and students	United States, and other AWS regions the service uses	Standard Contractual Clauses, and contractual clauses under LGPD art. 33. EU-US Data Privacy Framework where the vendor is certified.	Processor
Vercel	Vercel, Inc.	Hosting and deploying the website, serverless functions, the content delivery network, operational logs, and the e-signature application we host ourselves (Documenso Community Edition, open source, on Pyrmont's own Vercel account).	Application traffic, request headers and deployment metadata. For documents signed in that application: document content, signer name and email, and signature data.	Account holders, students and visitors	United States, and edge locations the service uses	Standard Contractual Clauses, and contractual clauses under LGPD art. 33. EU-US Data Privacy Framework where the vendor is certified.	Processor
Vercel Analytics	Vercel, Inc.	Cookieless, aggregated measurement of how the site is used, and of page-loading speed (Vercel Web Analytics and Vercel Speed Insights). Not used for advertising.	Events, pages, routes, hostnames, referrer, UTM parameters, country, device, browser, operating system, visitors, page views and bounce rate. No name, email address or user ID. Page addresses are cleaned of access tokens and of query parameters other than utm_ before they are sent.	Visitors and account holders, in aggregate	United States	Standard Contractual Clauses, and contractual clauses under LGPD art. 33. EU-US Data Privacy Framework where the vendor is certified.	Processor
Stripe	Stripe, Inc.	Payment processing, subscriptions and fraud checks on payments.	Customer identifier, subscription status and billing cycle. Stripe handles card numbers; we do not store them.	Paying customers	United States	Standard Contractual Clauses, and contractual clauses under LGPD art. 33. EU-US Data Privacy Framework where the vendor is certified.	Processor
Mercury	Mercury Technologies, Inc.	Business banking for the company: deposit accounts, fund transfers and corporate cards. Not part of the student product.	Company financial records for those banking operations.	The company	United States	Standard Contractual Clauses, and contractual clauses under LGPD art. 33. EU-US Data Privacy Framework where the vendor is certified.	Processor
ClickUp	Mango Technologies, Inc. (dba ClickUp)	Project tracking and customer-support tasks.	Support correspondence and attachments a person sends us.	Staff, and account holders when a support or billing record names them	United States	Standard Contractual Clauses, and contractual clauses under LGPD art. 33. EU-US Data Privacy Framework where the vendor is certified.	Processor
Amazon Bedrock	Amazon Web Services, Inc.	Foundation-model inference for grading, tutoring and related educational features.	Prompts and free-text answers submitted to the model, and the model's outputs.	Account holders and students	United States, and other AWS regions the service uses	Standard Contractual Clauses, and contractual clauses under LGPD art. 33. EU-US Data Privacy Framework where the vendor is certified.	Processor
Google Workspace	Google LLC	Internal email and collaboration, including Google Chat, about support and operations.	Message content that staff exchange, which may include a support request.	Staff, and account holders when a support or billing record names them	United States, and other Google locations	Standard Contractual Clauses, and contractual clauses under LGPD art. 33. EU-US Data Privacy Framework where the vendor is certified.	Processor
Pyrmont Holdings, Inc.	Pyrmont Holdings, Inc.	Group administration: contract management, billing support and accounting.	Account and billing records needed for those tasks.	Account holders and paying customers	United States	Intra-group terms with Standard Contractual Clauses, and contractual clauses under LGPD art. 33.	Processor (affiliate)

Advertising partners

Google Ads and Meta (Facebook and Instagram) receive advertising data on this site only after you consent, as the Cookie Policy describes. They act as independent controllers of that data, not only as our processors. Google Tag Manager and Google Analytics 4 measure the landing page go.practilium.com.br (container GTM-542T27QT), which is a separate site from this app. On that property Google signals and user-provided data collection are off; approximate location and device and browser data collection are on. We do not sell personal data.

Subprocessor	Legal entity	Purpose	Data categories	Data subjects	Processing location	Transfer mechanism	Role
Google Ads	Google LLC (US); Google Ireland Ltd. for users in the EEA and UK	Measuring which Google ads bring visits, sign-ups and subscriptions, and remarketing, through the Google Ads tag on this site. Only after consent. Google Privacy Policy: https://policies.google.com/privacy	Online identifiers and event data, including the _gcl_au and _gcl_aw cookies when you have consented, and a hashed email address at sign-up to measure the conversion.	Visitors and account holders who consent	United States, and other Google locations	Standard Contractual Clauses, and contractual clauses under LGPD art. 33. EU-US Data Privacy Framework where the vendor is certified.	Advertising partner (independent controller)
Google Tag Manager	Google LLC	Loads the measurement tags on the landing page go.practilium.com.br (container GTM-542T27QT). It does not load in this app, and it does not build audiences by itself.	Tag configuration and the technical data needed to fire a tag on that landing page.	Landing-page visitors	United States, and other Google locations	Standard Contractual Clauses, and contractual clauses under LGPD art. 33. EU-US Data Privacy Framework where the vendor is certified.	Advertising partner (independent controller)
Google Analytics 4	Google LLC	Measuring visits to the landing page go.practilium.com.br. Google signals is off. User-provided data collection is off. No cross-device linking. Approximate location and device and browser data collection is on.	Approximate location, device and browser type, and the _ga and _ga_* cookies on that page. No name, email address or phone number.	Landing-page visitors	United States, and other Google locations	Standard Contractual Clauses, and contractual clauses under LGPD art. 33. EU-US Data Privacy Framework where the vendor is certified.	Advertising partner (independent controller)
Meta (Facebook and Instagram)	Meta Platforms, Inc. (US); Meta Platforms Ireland Ltd. for users in the EEA and UK	Measuring which Facebook and Instagram ads bring visits, sign-ups and subscriptions, and remarketing, through the Meta Pixel. Only after consent. Meta Privacy Policy: https://www.facebook.com/privacy/policy/	Page address (without query parameters), events (visit, sign-up, subscription with value), pseudonymous account identifier, _fbp and _fbc cookies, IP address and browser. No name, email address or phone number.	Visitors and account holders who consent	United States, and other Meta locations	EEA/UK: EU-US Data Privacy Framework (Meta Platforms, Inc. is certified) and Standard Contractual Clauses. Brazil: LGPD Art. 33 (Meta's contractual clauses).	Advertising partner: independent controller; joint controller for Pixel collection for EEA/UK users (Meta Controller Addendum)