Last updated: 11 August 2026
Running this Service means sending some data to third parties. This page names every one of them and states exactly what they receive.
Draft — not yet in force. Still missing: Florida registration (Sunbiz document) number, registered postal address. A privacy policy that does not give the controller's address fails GDPR Art. 13(1)(a), and commercial email without a physical postal address breaches CAN-SPAM. Complete LEGAL_ENTITY in src/lib/legal.ts and have these documents reviewed by a lawyer before relying on them.
Each provider below receives only what it needs to perform its function, and is bound by its own data-protection terms. None of them is permitted to use your data for their own purposes.
| Provider | Purpose | Data received | Location |
|---|---|---|---|
| Stripe | Subscription billing and payment processing | Name, email, billing address, payment card details (collected by Stripe directly — we never see or store card numbers) | USA / EU |
| Cloudflare | Turnstile bot protection on sign-in and sign-up | IP address, browser and device signals, challenge interaction data | Global edge network |
| Google (OAuth) | Optional "Sign in with Google" authentication | Email address, display name, profile picture — only if you choose Google sign-in | USA / Global |
| Umami (self-hosted) | Aggregate page-view analytics | Page URL, referrer, browser, OS, device type and country. Umami sets no cookies and stores no identifier that can be traced back to a person. | Self-hosted at fickanalytics.phluit.net |
| Google Analytics 4 | Aggregate usage analytics on public pages | Pseudonymous device identifier, IP address, page views | USA / Global |
| DigitalOcean (Gradient AI) | Default provider for AI text, image and speech generation | The prompt or script text you submit, including brand descriptions and sample posts | USA / EU |
| OpenRouter | Alternative AI text provider (selectable via AI_PROVIDER) | The prompt text you submit, including brand descriptions and sample posts | USA |
| Runware | Alternative AI image provider (selectable via IMAGE_PROVIDER) | Image prompt text | EU |
| Fal.ai | AI logo generation and product photography | Image prompt text and any product image you upload | USA |
| Cartesia | Alternative AI voice provider (selectable via SPEECH_PROVIDER) | The script text you submit for narration | USA |
| Telegram | Optional scheduled-post notifications, only if you link an account | Your Telegram chat ID and the notification content | Global |
These are not third-party processors — the data stays on infrastructure we control — but you are entitled to know where it lives.
When you generate content, the prompt you submit — which may include your brand description and sample posts — is sent to the relevant AI provider so it can produce a result. We do not sell that content, and we do not use it to train our own models.
We cannot, however, make promises on a provider's behalf about their own training practices. If your prompts contain confidential or personal information about other people, review the provider's terms first, linked in the table above. As a rule, do not paste anything into an AI prompt that you would not be comfortable sending to a third party.
Several providers operate in the United States or globally. Where personal data of individuals in the UK or EEA is transferred outside those areas, the transfer relies on the provider's Standard Contractual Clauses or an applicable adequacy decision.
This page is updated whenever a provider is added or removed, along with the date at the top. If you rely on this list for a vendor assessment and want to be told in advance of changes, email privacy@socialschedulerplatform.com.
For what we collect and why, see the Privacy Policy.
Questions about these terms? legal@socialschedulerplatform.com