Sub-processors
Alpha Exotic Tech LLC engages the third parties below to help deliver SkedCast. Each may process personal data on our behalf under a signed data-processing agreement with appropriate safeguards, including the Standard Contractual Clauses for transfers of EU/UK personal data where relevant.
1. Current sub-processors
The following sub-processors may process personal data to provide the Service:
| Sub-processor | Purpose | Data categories | Region | Transfer |
|---|---|---|---|---|
| Alpha Exotic Tech (Private) Limited | Intra-group engineering and customer-support (staff access under our DPA) | All processed data, on a least-privilege, as-needed basis | Pakistan | SCCs / UK IDTA |
| Contabo GmbH | Hosting for the API, background worker and primary database (accounts, connected-account metadata, audit log), including the self-hosted job queue and malware scanner running on that infrastructure | All processed data in transit/at rest within the platform | Germany (European Union) | EU/EEA — no transfer required |
| Supabase (being retired) | Our former managed database. On 26 October 2026 we moved the production database to our own servers at Contabo. Supabase keeps a read-only copy until we delete it, which we plan to do around 9 November 2026. After that, Supabase will no longer hold any of your data and will be removed from this list | A read-only copy of account, connected-account metadata and content metadata | European Union | EU/EEA — no transfer required |
| Google Cloud Platform (Cloud Run) | Front-end application hosting (console, admin, and marketing sites) | Request metadata and session cookies | Singapore / global edge | SCCs / DPF |
| Cloudflare, Inc. (R2 object storage, CDN & Turnstile) | Media object storage and delivery; the human check on sign-up and other public forms | Uploaded media and thumbnails; technical browser signals and IP address during the human check | Per bucket region / global edge | SCCs where applicable |
| Stripe | Billing, subscriptions, and metered usage | Billing contact and payment metadata (no card numbers stored by us) | Global | SCCs / DPF |
| Amazon Web Services (Amazon SES) | Transactional and notification email delivery | Recipient email address and message content | European Union (Stockholm, Sweden) | SCCs / DPF (AWS Data Processing Addendum) |
| Google LLC (Google Analytics 4) | Marketing-website analytics — loaded only after a visitor accepts analytics cookies, and never when Global Privacy Control is asserted | IP address, pseudonymous client id, and page-view events on the marketing site | United States | SCCs / DPF |
| Anthropic | AI caption generation, reformatting, and content variation; in the inbox, reply suggestions, drafts and automatic replies a workspace’s rules request, translations and summaries | Prompt content (the post text you submit for assistance; inbox message text with email addresses, phone numbers and card and bank numbers removed first) | United States (per API region) | SCCs / DPF |
“SCCs” means the EU Standard Contractual Clauses (with the UK IDTA for UK transfers); “DPF” means reliance on the Data Privacy Framework where the provider is certified. The applicable mechanism is incorporated into our Data Processing Addendum.
1a. Partner programme: payment providers
If you are one of our affiliate or influencer partners, the providers below receive your data so that we can verify you and pay you. Stripe acts for us as a processor under its terms for Connect platforms. PayPal and Wise act as independent controllers of the payment itself, as banks and payment institutions do. These recipients concern partner data only, never the data of a customer’s workspace. See section 17 of our Privacy Policy.
| Provider | Purpose | Data | Transfer |
|---|---|---|---|
| Stripe (Connect and USDC payouts) | Identity verification, tax-form collection where offered, and sending payouts by bank transfer or USDC | Name, contact details, country, identity and bank or wallet details given to Stripe, payout amounts | SCCs / DPF |
| PayPal | Sending a payout to the PayPal email address you provide | PayPal email address, payout amount and reference | SCCs / DPF |
| Wise (not currently enabled) | Bank transfers in local currency. We will update this page before it is used | Name, bank details, payout amounts | SCCs / UK IDTA |
Our partner sanctions screening uses the free public lists published by the United States, the United Nations, the European Union and the United Kingdom, held on our own systems, so no screening vendor receives your data.
2. Services we run ourselves
Some parts of SkedCast that are commonly outsourced are run by us, on the hosting listed above, rather than by a third-party vendor. Our scheduling/job queue, malware scanning, application error monitoring, and performance telemetry are all self-hosted. Because no third party receives that data, those services are not sub-processors and are covered by our hosting provider entry. If we ever move any of them to a vendor-operated service, we will add that vendor to the table above.
3. A note on connected platforms
The social platforms you connect and publish to (Meta, Google/YouTube, X, TikTok, LinkedIn, Pinterest, Bluesky, and Telegram) are not our sub-processors. When you direct SkedCast to publish on your behalf, those platforms process the relevant data as your own processors, or as independent controllers, under their terms. How we use the data we obtain from each is described on our Platform API Data Use & Compliance page.
4. Changes & objections
We keep this list current. Customers with a data-processing agreement will be notified of new sub-processors and may have a right to object as set out in our Data Processing Addendum. Questions about this list can be sent to [email protected].