Sub-processors
Alpha Exotic Tech LLC engages the third parties below to help deliver SkedCast. Each may process personal data on our behalf under a signed data-processing agreement with appropriate safeguards, including the Standard Contractual Clauses for transfers of EU/UK personal data where relevant.
1. Current sub-processors
The following sub-processors may process personal data to provide the Service:
| Sub-processor | Purpose | Data categories | Region | Transfer |
|---|---|---|---|---|
| Alpha Exotic Tech (Private) Limited | Intra-group engineering and customer-support (staff access under our DPA) | All processed data, on a least-privilege, as-needed basis | Pakistan | SCCs / UK IDTA |
| Cloud hosting (compute & networking) | Application compute, networking, and orchestration | All processed data in transit/at rest within the platform | EU / US (per region) | SCCs where applicable |
| Managed PostgreSQL | Primary database (accounts, content metadata, audit log) | Account, connected-account metadata, content metadata | EU / US (per region) | SCCs where applicable |
| Managed Redis / queue | Caching and the scheduling/job queue | Transient job and cache data (identifiers, queued content) | EU / US (per region) | SCCs where applicable |
| Cloudflare (R2 object storage & CDN) | Media object storage and delivery | Uploaded media and thumbnails | Per bucket region | SCCs where applicable |
| Stripe | Billing, subscriptions, and metered usage | Billing contact and payment metadata (no card numbers stored by us) | Global | SCCs / DPF |
| Resend | Transactional and notification email delivery | Recipient email address and message content | United States | SCCs / DPF |
| Anthropic | AI caption generation, reformatting, and content variation | Prompt content (the post text you submit for assistance) | United States (per API region) | SCCs / DPF |
| PostHog | Product analytics | Pseudonymous usage events | European Union / United States | SCCs where applicable |
| Sentry | Error and performance monitoring (PII-scrubbed) | Error context with personal data scrubbed | United States / self-hostable | SCCs where applicable |
“SCCs” means the EU Standard Contractual Clauses (with the UK IDTA for UK transfers); “DPF” means reliance on the Data Privacy Framework where the provider is certified. The applicable mechanism is incorporated into our Data Processing Addendum.
2. A note on connected platforms
The social platforms you connect and publish to (Meta, Google/YouTube, X, TikTok, LinkedIn, Pinterest, Bluesky, and Telegram) are not our sub-processors. When you direct SkedCast to publish on your behalf, those platforms process the relevant data as your own processors, or as independent controllers, under their terms. How we use the data we obtain from each is described on our Platform API Data Use & Compliance page.
3. Changes & objections
We keep this list current. Customers with a data-processing agreement will be notified of new sub-processors and may have a right to object as set out in our Data Processing Addendum. Questions about this list can be sent to privacy@skedcast.com.