Sub-processors
Last updated: 30 September 2026
feega (Andrea Buttarelli, VAT no. 16090491008, [ADDRESS]) uses the providers below to run the Service. When we process personal data on behalf of a business customer, these are our sub-processors under the Data Processing Agreement. The same providers are listed in the Privacy Policy.
“SCCs” means the European Commission’s Standard Contractual Clauses (Decision 2021/914). “DPF” means the EU–US Data Privacy Framework, relied on only where the provider is certified.
Infrastructure and payments
Supabase
Purpose: database, authentication, file storage, realtime
Personal data: all account, workspace, content, brand, social, ads and billing records; uploaded and generated files
Location: EU
Vercel
Purpose: hosting, serverless functions, web analytics; isolated code sandboxes for the agent, when enabled
Personal data: request data, IP address, content processed during a request
Location: US / global
Transfer mechanism: DPF / SCCs
Stripe
Purpose: payments, subscriptions, invoices
Personal data: name, email, billing address, VAT number, payment details (held by Stripe)
Location: EU / US
Transfer mechanism: DPF / SCCs
Resend
Purpose: transactional email (invites, notifications)
Personal data: email address, name, message content
Location: US
Transfer mechanism: DPF / SCCs
AI generation and moderation
OpenRouter, and the model providers it routes each request to
Purpose: text, chat, image and video generation; the second-stage moderation review
Personal data: prompts, attachments, brand context, generated outputs
Location: US / other, per model
Wiro
Purpose: image and video generation with the uncensored model catalogue (NSFW mode, not yet available)
Personal data: prompts, reference media, generated outputs
Location: [LOCATION]
Transfer mechanism: [SCCs — to confirm]
ElevenLabs
Purpose: voice-over, music and sound generation
Personal data: script text, chosen voice, generated audio
Location: US / EU
Transfer mechanism: DPF / SCCs
TypeSafe (Jev classifier)
Purpose: first-stage prompt moderation
Personal data: prompt text, reference descriptions
Location: [LOCATION]
Transfer mechanism: [SCCs — to confirm]
Social, ads and research
Zernio
Purpose: connecting social accounts, publishing, reading account metrics, Meta ads operations
Personal data: account handle and profile, access tokens, posts, metrics
Location: US
Meta Platforms
Purpose: ad campaigns on your ad account
Personal data: ad account IDs, campaigns, creatives, metrics
Location: IE / US
Transfer mechanism: DPF / SCCs
ScrapeCreators
Purpose: reading public social profiles and posts you add to a feed
Personal data: public profile data and posts
Location: US
Monitoring and analytics
Sentry
Purpose: error monitoring; session replay only when an error occurs
Personal data: user ID, email, IP address, browser data, error context
Location: US / EU
Transfer mechanism: DPF / SCCs
PostHog
Purpose: product analytics (anonymous without consent; persistent and session recording with consent)
Personal data: pseudonymous ID, user ID and email once signed in, pages, clicks
Location: EU (PostHog EU cloud)
Transfer mechanism: none needed
Microsoft Clarity
Purpose: session replay and heatmaps (consent only)
Personal data: pseudonymous ID, interactions, device data
Location: US
Transfer mechanism: DPF / SCCs
Seline
Purpose: page-view analytics; linked to your user ID once signed in
Personal data: pages, referrer, user ID
Location: [LOCATION]
Transfer mechanism: [to confirm]
Google (gtag.js conversion tag)
Purpose: advertising conversion measurement
Personal data: cookie IDs, pages, conversion events, IP address
Location: US
Transfer mechanism: DPF / SCCs
Meta Pixel
Purpose: advertising conversion measurement
Personal data: cookie IDs (_fbp, _fbc), pages, conversion events, IP address
Location: IE / US
Transfer mechanism: DPF / SCCs
Framer
Purpose: marketing website
Personal data: visitor data on the marketing site
Location: NL / global
Platforms you publish to (Instagram, Facebook, TikTok and others) receive your content as independent controllers, not as our sub-processors.
Changes
We give business customers at least [30] days’ notice before adding or replacing a sub-processor, by email to the workspace owner or in the Service, and update this page. You may object on reasonable data-protection grounds as described in the DPA §7.
Questions: support@feega.app