Draft
This document is a draft prepared for legal review and is not yet in effect.

Subprocessors

DRAFT for counsel review. Not yet in effect. Version 0.1, 21 October 2026.

DataHubz uses the following third parties to host and operate SotialMedia. Each processes customer data only as needed to provide its service to DataHubz and under contractual terms that restrict other use. We will update this page and notify organization owners by email at least 30 days before adding a subprocessor that processes customer content or personal data; objections can be sent to support@sotialmedia.com.

Infrastructure

  • Vercel Inc. (United States). Hosting of the web console and API. Processes: all request data, session cookies, content submitted through the console and API, server logs. Location: United States (edge network worldwide for static assets).
  • Neon Inc. (United States). Managed PostgreSQL database. Processes: all stored application data, including account data, content, encrypted platform credentials, audit and usage history, backups within the Neon platform. Location: United States region selected at project creation.
  • Cloudflare, Inc. (United States). Object storage (R2) for media files uploaded by customers and for database backups. Processes: media objects, backup archives. Location: automatic placement within the selected hint region; United States for our configuration.
  • Railway Corp. (United States). Hosting of the publishing worker that executes scheduled jobs. Processes: job data, content being published, decrypted platform credentials in memory during a publishing call, worker logs. Location: United States region selected at service creation.

Communications

  • Resend, Inc. (United States). Transactional email: sign-in links, invitations, notifications. Processes: recipient email address, message content. Location: United States.

Billing

  • Stripe, Inc. (United States). Payment processing and invoicing, when billing is enabled for an organization. Processes: billing contact details, payment method (held by Stripe, not by DataHubz), invoice history. Location: United States and the regions Stripe uses for processing.

Social media platforms

  • X Corp. (United States). Destination platform for publications. Processes: the content and media you direct us to publish, the account authorization you grant, post identifiers and status returned to us. X acts under its own terms with you as the account holder; it is listed here because DataHubz transmits your data to it on your instruction.

Not subprocessors

GoDaddy (domain registration and DNS) does not process customer data. Version control and continuous integration providers process source code, not customer data.

Changes

This list is maintained at https://sotialmedia.com/legal/subprocessors. The change history is kept in the DataHubz repository.