At a glance
A sub-processor is a company we engage to process personal data from our customers' workspaces on our behalf, so we can provide Postocial. This list is part of our Data Processing Addendum. Each sub-processor must protect personal data under a written agreement with terms at least as protective as our DPA, and we remain responsible for its work.
Details marked "To be confirmed" will be completed as soon as the provider confirms them in writing.
Application and infrastructure
| Sub-processor | What it does | Personal data | Location |
|---|---|---|---|
| OnlySocial Gramto Social, Inc. Privacy policy, Terms | Provides and operates the application platform Postocial runs on. | All data in the app: user accounts, team members, connected social accounts and their access tokens, posts, media, inbox conversations and messages, contacts and CRM data, broadcasts and automations, bookings, payment and order records synced from your own providers, AI Knowledge sources, analytics, bio pages and subscription details. | United States (company). The application runs on servers in Germany. |
| Hetzner Online GmbH Privacy policy | Hosts the servers the Postocial application runs on. | All data stored in the app, as listed for the platform provider. | Germany |
| Pusher To be confirmed Privacy policy | Delivers realtime updates inside the app, so changes show up without reloading the page. | Workspace data carried in realtime updates, and connection data such as IP address. | United States |
| Bunny Fonts BunnyWay d.o.o. Privacy policy, GDPR | Serves the font the Postocial app uses on every page, including sign-in and sign-up. | Technical data from each font request, such as IP address and browser type. Bunny says it keeps no logs of these requests. | Global network. Company in Slovenia. |
| Transactional email provider To be confirmed | Sends the account emails the app generates, such as email verification and password resets. | Name, email address and the content of those emails. | To be confirmed |
Payments and AI
| Sub-processor | What it does | Personal data | Location |
|---|---|---|---|
| Stripe Privacy policy, DPA | Processes subscription payments and stores payment methods. Stripe is also an independent controller for fraud prevention and its own legal duties. | Name, email address, billing details, payment card details, transaction history and fraud-prevention signals. | United States and other countries where Stripe operates |
| OpenAI Privacy policy | Generates text and images for the built-in AI writing assistant and AI images. | Prompts, the content the AI is asked to work on, and the generated output. | United States |
When a workspace connects its own AI provider key, the requests made with that key go to that provider under the workspace's own agreement, so that provider isn't our sub-processor.
| Sub-processor | What it does | Personal data | Location |
|---|---|---|---|
| mycompany.email Legal entity to be confirmed Data processing, Security | Hosts Postocial's own mailboxes, including support, and sends the emails we write to you. It receives incoming mail on its own mail servers and uses SMTP2GO to deliver outgoing mail. | Names, email addresses, message content, attachments and delivery events. | European Union |
| SMTP2GO Sand Dune Mail Ltd Privacy policy | Delivers outgoing email sent through mycompany.email. | Names, email addresses, message content and delivery events. | European Economic Area. Company in New Zealand. |
Website
| Sub-processor | What it does | Personal data | Location |
|---|---|---|---|
| Contabo Contabo GmbH Privacy policy | Hosts the server the postocial.com website runs on. | Technical data from each website request, such as IP address, browser type and the page requested. | Germany |
The website sets no cookies and uses no analytics. See our Cookie Policy.
Services you connect
When you connect these services, you instruct us to send them data so they can do what you asked. They act under their own terms and privacy policies, so they aren't our sub-processors:
- Social networks: Meta (Facebook Pages, Instagram and Threads), Google (YouTube and Google Business Profile), LinkedIn, TikTok, Pinterest, X (through your own X developer app), Reddit, Tumblr, Telegram, Bluesky and the Mastodon servers you post from.
- Messaging: WhatsApp (Meta), Telegram bots, and SMS through Twilio, Plivo or your own SMS gateway.
- Payment providers for payment links: Stripe, PayPal, Razorpay, Paystack, MyFatoorah and Mercado Pago, when you connect your own account to send payment links. This is separate from Stripe processing your Postocial subscription, listed above.
- Stores: Shopify and WooCommerce.
- CRM and productivity: HubSpot, Mailchimp, Google Sheets and Slack.
- Meetings: Google Calendar and Zoom.
- Media: Dropbox, Google Drive, Unsplash, Giphy and Adobe Express.
- AI providers with your own key: OpenAI, Anthropic (Claude), Google (Gemini) and DeepSeek, for AI replies, AI reply suggestions and AI Knowledge.
- Workflow tools and AI assistants: Zapier, tools you point at our REST API or webhooks yourself (such as n8n), and MCP clients such as Claude, ChatGPT, Claude Code, Cursor and VS Code.
Data transfers
Some sub-processors are based in, or process data in, countries outside the EEA and the UK, including the United States. For those transfers we rely on the Standard Contractual Clauses (with the UK Addendum for UK data), an adequacy decision, or a provider's certification under the EU-U.S. Data Privacy Framework. Our DPA has the details.
Changes and objections
- We give at least 30 days' notice before a new sub-processor starts processing customer personal data, by updating this page and emailing customers who asked for updates.
- To get these updates, email hello@postocial.com from the email address on your account.
- In an emergency, such as replacing a provider that fails, we may make a change sooner, and we'll tell you as soon as we can.
- If you have a reasonable data protection concern about a change, email us during the notice period. We'll discuss it with you and look for a solution. If we can't find one, you can cancel your subscription before the change takes effect.
Change log
| Date | Change |
|---|---|
| First version of this list published. |
Contact
Questions about our sub-processors? Email hello@postocial.com.