Skip to content

Unterauftragsverarbeiter

Subprocessors

Last updated: 2026-09-23

⚠ DRAFT — NOT READY TO PUBLISH.

The vendor entries below are placeholders describing the categories of subprocessor Postovio will need. The actual companies, regions and data categories have not been confirmed by the site owner and must be filled in before postovio.com goes live.

This is a legal document with regulatory weight under GDPR Article 28: a published subprocessor list that does not match reality is worse than no list at all. It has been scaffolded rather than invented so the site builds, and it is tracked as an open item in postovio/docs/superpowers/specs/2026-09-23-postovio-design.md, section 10.

This page lists the third-party services that process customer data on behalf of Postovio. We update it whenever we add, change, or remove a subprocessor.

What “subprocessor” means

A subprocessor is any third-party service we share customer data with in order to operate Postovio. Some are obvious — the infrastructure that stores your scheduled posts, the network that relays your transactional email. Others are less so, such as the analytics service that records which of your posts were clicked.

You retain control. When you delete content, we delete it from every subprocessor on that content’s path. When you close your account and exercise your data-export or erasure rights, the cleanup propagates to every subprocessor listed below.

Categories of subprocessor

Email delivery infrastructure

Vendor: TO BE CONFIRMED.

The service that physically relays transactional email and manages sending IP reputation.

  • Data shared: recipient email addresses, message subject and body, template variable values, delivery and bounce events.
  • Region: to be confirmed.
  • Encryption: TLS in transit; at rest per the vendor’s policy.

Social platform APIs

Postovio publishes to social networks on your behalf using the access tokens you grant. Each network receives the content you schedule for it.

  • Recipients: the networks you connect — X, LinkedIn, Meta (Instagram and Facebook), TikTok, YouTube, Pinterest, Threads.
  • Data shared: post content, media, scheduled publication time, and the OAuth token for the connected account.
  • Note: these are not conventional subprocessors. Each network is an independent controller of the data you publish to it, governed by that network’s own terms, which you accept when you connect the account.

Application hosting and storage

Vendor: TO BE CONFIRMED.

Where the application runs and where your drafts, templates, media and analytics history are stored.

  • Data shared: all customer content and account data.
  • Region: to be confirmed.

Payment processing

Vendor: TO BE CONFIRMED.

  • Data shared: billing name, billing address, email address, and the subscription tier. Postovio does not receive or store full card numbers.
  • Region: to be confirmed.

Product analytics and error reporting

Vendor: TO BE CONFIRMED.

  • Data shared: pseudonymous usage events, browser and device metadata, and stack traces when the application errors.
  • Region: to be confirmed.

Changes to this list

We will post material changes here before they take effect. If you have a data processing agreement with us that requires advance notice of new subprocessors, that notice period applies and takes precedence over this page.

Questions

Email privacy@postovio.com.