Subprocessors
The companies that process personal data for HivePost. Each one is bound by a data processing agreement.
| Company | What for | Data | Where | Transfer safeguard |
|---|---|---|---|---|
| Supabase (Supabase Pte. Ltd. and affiliates) | Database, sign-in, file storage, backups | All account and workspace data, media | EU, Frankfurt (eu-central-1). Support and some logs may be accessed from outside the EU | Standard Contractual Clauses in Supabase's DPA |
| Cloudflare, Inc. | Hosting of the app (Workers), DNS, protection against attacks, email forwarding | Requests to hivepost.app, including the data in them; emails forwarded to our addresses | Global network | EU-US Data Privacy Framework; Standard Contractual Clauses |
| Trigger.dev | Background jobs: scheduled publishing, AI tasks, notifications, emails, clean-up | Post IDs and the content needed for each job | [region where jobs run and job data is stored] | Trigger.dev's DPA [transfer safeguard to confirm] |
| Anthropic (Anthropic Ireland, Limited for EEA customers) | AI writing, photo descriptions, reply drafts, brand voice | The content you send to an AI feature | United States | Standard Contractual Clauses in the DPA of Anthropic's Commercial Terms |
| Resend (Plus Five Five, Inc.) | Service and product emails | Email address, name, email content | Sent from the EU (Ireland, eu-west-1); company in the United States | EU-US Data Privacy Framework; Standard Contractual Clauses |
| Stripe (Stripe Payments Europe, Ltd., Ireland, and affiliates) | Payments, invoices, tax calculation | Name, email, billing address, VAT number, payment details (card details go only to Stripe) | EU (Ireland) and United States | EU-US Data Privacy Framework; Standard Contractual Clauses |
| SmartBill (Intelligent IT S.R.L., Romania) | Invoices and Romanian e-Factura | Name or company name, billing address, country, VAT number, email, amounts | EU (Romania) | Within the EU; data processing agreement |
Changes
We tell business customers at least 30 days before we add or replace a subprocessor (see the DPA). To get these notices, write to privacy@hivepost.app.
Planned: Meta Platforms Ireland Ltd. (WhatsApp Business), for approval messages to your phone, only if you turn them on once that feature opens. It is added to this list before it starts.
Recipients you choose
Not subprocessors: the social networks you connect receive what you publish there; browser push services (from Google, Apple, Mozilla or Microsoft, depending on your browser) carry encrypted notifications to your devices.