Skip to content

Sub-processors

The third parties that process personal data on Postreo's behalf, what each does, and where.

Last updated

About this list

These providers help us deliver the service. Each is bound by a written agreement that limits it to processing data on our instructions and requires appropriate security. Transfers outside the EEA and UK rely on Standard Contractual Clauses or the EU-US Data Privacy Framework (see our privacy policy).

Customers with a Data Processing Addendum are notified of new sub-processors at least [NOTICE PERIOD] days before they start processing and may object. To be notified, email [PRIVACY CONTACT EMAIL].

Infrastructure

ProviderPurposeDataLocation
Vercel Inc.Web application hosting, privacy-friendly analytics (with consent)Request metadata, IP address, usage data[REGION] / United States
Neon Inc.Managed PostgreSQL databaseAll account and workspace data[DATABASE REGION]
[REDIS PROVIDER]Cache, rate limiting, job queues, short-lived sign-in tokensSession and job metadata[REGION]
Cloudflare R2 / [STORAGE PROVIDER]Storage of uploaded and generated mediaImages, video and documents you upload[REGION]
[EMAIL/SMTP PROVIDER]Transactional and (opted-in) marketing emailName, email address, email content[REGION]
Stripe, Inc.Payment processing and invoicing (hosted checkout; card data never touches our servers)Billing contact, subscription detailsUnited States / Ireland

AI model providers

Used only when someone uses an AI feature in a workspace that has AI enabled. Workspace owners and admins can turn AI off entirely. Which provider handles a given request depends on the model chosen.

ProviderPurposeDataLocation
Anthropic, PBCText generation (assistant, agent)Prompts and draft contentUnited States
OpenAI, L.L.C.Text, image and video generationPrompts, draft content, reference imagesUnited States
Google LLC (Gemini)Text, image and video generationPrompts, draft content, reference imagesUnited States
xAI Corp.Text and image generationPrompts and draft contentUnited States
Z.aiText generationPrompts and draft content[LOCATION]

Sign-in and connected networks

These receive data because you choose to use them: signing in with an existing account, or publishing to a network you connected. Their own privacy policies apply to what they hold.

ProviderPurposeDataLocation
Google LLCSign in with GoogleName, email address, profile pictureUnited States
Meta Platforms, Inc.Sign in with Facebook; publishing to Facebook and InstagramProfile identifiers, content you publishUnited States / Ireland
Connected social networks (X, LinkedIn, TikTok, YouTube, Pinterest, Threads, Bluesky, Mastodon and the others you connect)Publishing your scheduled posts and reading back analyticsContent you publish, account identifiersVaries by network