Subprocessors and connected platforms
Two lists, because they are legally different things. A subprocessor processes personal data on our behalf and under our instructions. A connected platform is an independent controller you connect deliberately for a brand; it processes what we send under its own terms and its own agreement with you.
Subprocessors
Each row names the configuration that sends data to the provider. "In use here" is read from this deployment's configuration when the page loads: a provider that is listed but not in use has no key set and receives nothing.
| Provider | Purpose | Personal data | Region | In use here | DPA |
|---|---|---|---|---|---|
| Hosting provider | Runs the application, its database and queue workers, and takes the hourly database backup outside the application. | Everything the service stores, at the infrastructure layer. | Not stated in configuration; confirmed on request. | Always | On request |
| OpenAI | AI text generation (Content Studio, inbox reply drafts, report insights) and audio transcription of uploaded media. | Prompt text composed from brand material and free text the agency wrote; the audio track of uploaded video and audio, which carries the voices of whoever appears in it. | United States (provider statement). | Yes | DPA for OpenAI |
| Anthropic | AI text generation when the deployment or a Content Studio batch selects Claude as the chat provider. | The same prompt text as OpenAI: brand material and free text the agency wrote. No audio. | United States (provider statement). | Yes | DPA for Anthropic |
| Stripe | Subscription billing and checkout. | Agency billing email, subscription state and the payment method, which Stripe holds and we never see. | United States (provider statement). | Not configured | DPA for Stripe |
| Sentry | Error monitoring. | Request context around an application error, which can include a user identifier. Default personal-data capture is switched off. | United States (sentry.io default; provider statement). | Yes | DPA for Sentry |
| Transactional email | Sends invitations, approval notifications, password resets and scheduled reports. Which provider is the one configured by MAIL_MAILER: Postmark, Resend, Amazon SES or an SMTP relay. | Recipient name and address, and the message content. | Postmark and Resend: United States. Amazon SES: the configured AWS region. SMTP: the relay operator's. | Always | DPA for Transactional email provider |
| Amazon S3 | Media storage when the s3 disk is configured; the local disk is used otherwise. | Uploaded media and the filenames operators gave them. | The configured AWS region. | Not configured | DPA for Amazon S3 |
| bunny.net (Bunny Fonts) | Serves the typeface a SmartLink page owner picks for that page. The app's own interface font is served from this app. | The visitor's IP address and browser headers at the moment the font is fetched. No cookies, no account data. | Global content delivery network operated from the European Union (provider statement). | Always | DPA for bunny.net (Bunny Fonts) |
| Pexels | Stock photo and video search from the composer. | The search terms typed. No account or brand data is sent. | United States (provider statement). | Yes | DPA for Pexels |
Connected platforms
Each connection is created by you for one brand, sends only that brand's content, reads only that brand's results, and can be disconnected at any time from brand settings. Disconnecting deletes our copy of the platform tokens and is recorded in the audit log. The iUtils hub is first-party single sign-on run by the same operator, not a third party.
| Platform | What the connection does | Their privacy policy |
|---|---|---|
| Meta — Facebook, Instagram and Threads | Publishing, inbox, analytics and Meta Ads. | Policy for Meta — Facebook, Instagram and Threads |
| Publishing, analytics and LinkedIn Ads. | Policy for LinkedIn | |
| X | Publishing and analytics. | Policy for X |
| TikTok | Publishing and analytics. | Policy for TikTok |
| Google — YouTube, Business Profile, Google Ads, Google Analytics and Google Drive | Publishing and analytics (YouTube, Business Profile), reviews (Business Profile), paid results (Google Ads), site traffic (Google Analytics, read-only) and media import from a folder you choose (Google Drive, read-only). | Policy for Google — YouTube, Business Profile, Google Ads, Google Analytics and Google Drive |
| Publishing and analytics. | Policy for Pinterest | |
| Bluesky | Publishing, using an app password you create in Bluesky. | Policy for Bluesky |
| Canva | Importing designs into the media library. | Policy for Canva |
Changes to this list
This page and the copy in our repository are generated from one configuration file, and a test fails our build when they differ. The date at the top changes when a provider is added or removed. To be told before a change, or to ask for a data-processing agreement, write to [email protected].