Subprocessors
Last updated September 14, 2026
These are the third parties that process personal information on our instructions when you use PostForge. Each is bound by a data processing agreement or equivalent terms, and we review a provider before adopting it. Where personal information leaves the EEA or UK, we rely on standard contractual clauses (with the UK addendum or IDTA where applicable). Email privacy@thepostforge.ai to ask about the safeguards for any provider, or to be told in advance about a change to this list.
| Provider | Service | Personal information involved | Location | Role |
|---|---|---|---|---|
| DigitalOcean | Application, database and backup hosting | Everything stored in the Service (account, content, tokens, logs) is hosted here | Canada — Toronto, Ontario (all PostForge services) | Processor |
| Resend | Transactional and service email delivery | Name, email address, and the content of the email we send you | United States | Processor |
| OpenRouter | Routing to AI text and image models | Topics, article text and titles, prompts, drafts, writing samples, image prompts (never tokens, email, IP, or LinkedIn connection data) | United States | Processor |
| Cerebras | AI text models (drafting) | Article text, topics, prompts, drafts, writing samples | United States | Processor |
| Parallel | Article discovery / web search | Topic keywords and derived search queries | United States | Processor |
| PostHog | Product analytics | Browser analytics (only after you accept), account ID, feature usage, page paths | United States | Processor |
| PayPal | Subscription billing | Payment details, subscription and transaction identifiers, billing contact | United States (and PayPal's own group) | Independent controller for payment services, and processor where it acts on our instructions |
| Platform the Service publishes to | Member identifier, authorized profile fields, published posts, OAuth tokens | United States (and LinkedIn's own group) | Independent controller for its own platform; processor for the API calls we make at your direction |
Not subprocessors
- Our own infrastructure — a Redis queue and a self-hosted model proxy run inside the same private network as the application; they are ours, not a third party's.
- Marketing-video tooling — we use an external text-to-speech and image-to-video service to produce PostForge's own promotional videos. It processes our brand assets, not customer personal information.
Changes
If we add or replace a provider that touches personal information, we update this page and the effective date above, and we notify affected customers by email where the change is material. See the Privacy Policy for the full picture of what we collect and why.