Sub-processors
Last updated: 2026-05-27
TryMyPost relies on a selected set of third-party service providers ("sub-processors") to deliver the platform — including hosting, authentication, AI inference, payment processing, transactional email and analytics. The table below lists every active sub-processor at the date above, the service area, the categories of personal data they process on our behalf, the hosting region and the legal mechanism used to transfer personal data outside the European Economic Area where applicable.
This list may change as we evolve the product or replace vendors. We will notify customers via email and update this page at least 14 days before adding a new sub-processor or materially changing the role of an existing one, where reasonably practicable. If you do not agree with a new sub-processor, you may terminate your subscription before the change takes effect under the conditions of our Terms.
| Provider | Service area | Data processed | Hosting region | Transfer mechanism | DPA |
|---|---|---|---|---|---|
| Google Cloud (Firebase Auth + Firestore) | User authentication, application database | Account profile, saved content, sessions | US (multi-region) | EU-US DPF + SCC | View DPA |
| Google (Gemini API) | AI text + image generation, content analysis | Prompts, uploaded images, generated outputs | US | EU-US DPF + SCC | View DPA |
| Google Analytics 4 | Aggregate website analytics (consent-gated) | Pageviews, events, IP (anonymized) | US | EU-US DPF | View DPA |
| Google Safe Browsing | Malicious URL detection for link-in-bio | URLs submitted by users | US | EU-US DPF | Privacy terms |
| OpenAI | AI text + image generation | Prompts, outputs, request metadata | US | SCC + OpenAI DPA | View DPA |
| ScrapeCreators | Public Instagram data fetching for Competitor Analysis & Profile Analytics | Public Instagram handles, post metadata (on user instruction) | US | SCC (under DPA) | Contact provider |
| Stripe | Payments, billing, subscription management | Name, email, billing address, payment method token, transaction history | US / IE | EU-US DPF | View DPA |
| Resend | Transactional email delivery | Recipient email, message body | EU | EU controller — no transfer | View DPA |
| Cloudflare R2 | Object storage (images, share previews) | Generated images, user uploads | Global edge (US origin) | EU-US DPF + SCC | View DPA |
| Sentry | Error monitoring (consent-gated for client) | Stack traces, anonymized user context, URLs | DE ingest + US processing | SCC | View DPA |
| PostHog | Product analytics (consent-gated) | Events, user ID, session metadata | EU endpoint preferred (US fallback) | SCC | View DPA |
| Vercel | Hosting, Vercel Analytics, Speed Insights | Logs, web vitals, pageviews | Global edge (US) | EU-US DPF | View DPA |
| Pexels | Stock image library (optional) | Search query | US | SCC | Terms |
| Apple Sign-In | Authentication (optional sign-in) | Email (relay or real), name | US | DPF | Privacy terms |
Notification policy
We notify customers via email and update this page at least 14 days before adding a new sub-processor or changing the role of an existing one, where reasonably practicable. Customers who object to a new sub-processor may terminate their subscription under the Terms before the change takes effect.
Contact
For privacy-related requests, sub-processor objections or to receive notifications about changes to this list, contact our privacy team:
trymypost.business@gmail.com