CC360 Sub-Processors
Last updated: April 2026
Course Creator 360 Inc. ("CC360") engages certain third-party companies ("Sub-Processors") to assist in providing its services to customers. This page identifies the Sub-Processors currently authorized by CC360, the services they provide, and the location where they process Customer Personal Data. This page is maintained in connection with the CC360 Customer Data Processing Addendum ("DPA") and is referenced therein pursuant to Section 6.1.
CC360 is committed to ensuring that all Sub-Processors are bound by written agreements that require them to protect Customer Personal Data to a standard at least equivalent to the standard required of CC360 under the DPA.
Infrastructure & platform
This Sub-Processor provides the core infrastructure on which the CC360 platform is hosted and delivered.
| Sub-Processor | Purpose | Data processed | Location |
|---|---|---|---|
| HighLevel LLC (GoHighLevel / GHL) |
Core platform hosting, database storage, application delivery, email/SMS infrastructure, and sub-account management for all CC360 services. | All Customer Personal Data submitted to the CC360 platform, including contact records, communications, course content, and associated metadata. | United States |
Business operations
These Sub-Processors support CC360's internal business operations, including customer support, communications, and analytics.
| Sub-Processor | Purpose | Data processed | Location |
|---|---|---|---|
| Google LLC (Google Workspace) |
Business email, calendaring, document storage, and customer support correspondence used by CC360 staff in communicating with and supporting Customers. | Customer business contact details and the content of email correspondence, support tickets, and documents shared with CC360. | United States |
| Zoom Video Communications, Inc. | Hosting of sales calls, onboarding sessions, and customer support calls, including recordings and transcripts where authorized by participants. | Participant names, email addresses, call audio and video recordings, and transcripts where generated. | United States |
| Google LLC (Google Analytics) |
Measurement of website usage and product engagement in aggregate form on CC360-owned web properties. | Usage metadata including device type, IP address (truncated where applicable), referrer URLs, and interaction events. | United States |
AI & data analysis
CC360 uses the following AI Sub-Processors to analyze internal business data, including transcripts of CC360's own sales, onboarding, and support calls with Customers. Customer Personal Data submitted to these providers is processed transiently for the specific analysis request and is not used to train the providers' models.
| Sub-Processor | Purpose | Data processed | Location |
|---|---|---|---|
| Anthropic, PBC | AI-assisted analysis of call transcripts, support communications, and internal business data for quality assurance, customer experience improvement, and internal analytics. | Transcripts and content of CC360's communications with Customers, which may contain Customer business contact information and the substance of those communications. | United States |
| OpenAI, L.L.C. | AI-assisted analysis of call transcripts, support communications, and internal business data for quality assurance, customer experience improvement, and internal analytics. | Transcripts and content of CC360's communications with Customers, which may contain Customer business contact information and the substance of those communications. | United States |
Payment processing
CC360 does not directly process payment card data for Customers' end-users. Instead, the CC360 platform (via HighLevel) offers an integration marketplace that allows each Customer to select and connect their own payment processor of choice. When a Customer's end-user makes a payment, card data flows from that end-user directly to the payment processor the Customer has selected, typically via tokenized integration. CC360 does not store or retain raw payment card data.
The payment processor selected by a Customer operates under that Customer's own direct contractual and privacy relationship with the payment processor, governed by the payment processor's own terms of service and privacy policies. For this reason, payment processors integrated by Customers are generally processors of the Customer, rather than sub-processors of CC360. However, CC360 identifies the categories of available integrations below for transparency.
Commonly integrated payment processors available through the CC360 / HighLevel platform include, without limitation: Stripe, PayPal, Authorize.net, NMI, Square, Adyen, Razorpay, Mercado Pago, and additional regional and specialty providers. The set of available integrations is maintained by HighLevel and is subject to change without notice as new providers are added or existing providers are deprecated. A current list of integrated payment providers is available within the CC360 platform.
Customer-configured integrations. Customers may also connect additional payment processors or other third-party services to their CC360 account through Zapier, webhooks, or other integration mechanisms of their choosing. Any such integrations are configured and controlled by the Customer, and any data transmitted to those third parties is governed by the Customer's own agreements with those providers. CC360 is not a party to those integrations and does not act as a controller or processor of data transmitted through them.
For CC360's own subscription billing (i.e., billing for Customer's subscription to the CC360 service itself), CC360 uses the following payment processor:
| Sub-Processor | Purpose | Data processed | Location |
|---|---|---|---|
| Stripe, Inc. | Subscription billing and payment processing for Customer's own subscription to CC360 services. | Customer billing contact information, tokenized payment card data, billing address, and subscription transaction records. | United States |
Notification of changes
CC360 will provide notice of the engagement of any new Sub-Processor, including the name, the services to be provided, and the location of processing, prior to authorizing the new Sub-Processor to process Customer Personal Data. Notice will be provided by updating this page and, where applicable, by direct notification to Customers who have subscribed to receive such updates.
Subscribe to Sub-Processor updates
To receive notifications when CC360 updates this list, email [email protected] with the subject line "Subscribe to Sub-Processor Updates." CC360 will maintain your email on a notification list and send notice of any addition or replacement of a Sub-Processor.
Right to object
As described in Section 6.3 of the DPA, Customers may object to the appointment of a new Sub-Processor within thirty (30) days of CC360's notice by submitting a written objection to [email protected], including the name of the Sub-Processor objected to and a reasonable statement of the basis for the objection. CC360 will work in good faith to address any such objection. If no mutually agreeable resolution can be reached, Customer may terminate the specific Services affected by the objection in accordance with Section 6.3.2 of the DPA.
Contact
For questions about this Sub-Processor list or CC360's privacy practices, please contact [email protected].