Subprocessors
| Subprocessor | Service | Data | Location | Transfer safeguard | Status |
|---|---|---|---|---|---|
| DigitalOcean, LLC | Hosting of application, database and local media storage | All Customer Personal Data | USA (New York, NYC3) | Onward-transfer contract (SCCs Clause 8.8); DPF where certified | Active |
| Cloudflare, Inc. | DNS, network and security; Browser Run (rendering of images in a remote browser); R2 object storage for media | Content in transit and in rendering; stored images and photos | Global network; company in USA | Onward-transfer contract (SCCs Clause 8.8); DPF where certified | Network and rendering: active. R2 storage: not active on 1 October 2026; covered by this notice |
| ZERNIO SOFTWARE SL (Zernio) | Connection of social accounts and publishing of posts; holds access tokens for connected accounts | Connected-account data, access tokens, posts and media to publish | Spain (provider); international subprocessors as described in its Trust Center | Onward-transfer contract (SCCs Clause 8.8) | Active when Customer connects an account |
| Postmark (ActiveCampaign, LLC) | Transactional email (for example approval-link and reconnect notices) | Email addresses, names, message content | USA | Onward-transfer contract (SCCs Clause 8.8); DPF where certified | Active |
| OpenAI, L.L.C. | AI planning and text generation in the Feedloom planner | Sources, brand data, prompts and posts sent with each request; requests sent with storage turned off; not used for training under OpenAI's API terms | USA | Onward-transfer contract (SCCs Clause 8.8); DPF where certified | Not active on 1 October 2026; covered by this notice |
Stripe processes payment data of Customer's own account as a separate service; it does not process Customer Personal Data under this DPA. Social networks and AI assistants connected by Customer are not Subprocessors (section 2.4).