Sub-processors

Hosting and edge compute

Serves the website and runs server functions.

Data: Request metadata, IP address, server logs.

Object storage

Stores uploaded photos, generated renders, and inbound assets.

Data: Image and file bytes you upload or that we generate for you.

Database

Managed libSQL hosting for account, content, and audit data.

Data: Account records, drafts, schedule, encrypted connected-platform tokens.

Transactional email

Sends sign-in links, draft notifications, and billing receipts.

Data: Recipient email, message body.

Payment processing

Subscription billing and tax.

Data: Customer record, plan, billing history. Card data is held by Stripe; we never see it.

Payment processing (alternate)

Merchant-of-record billing for regions where Paddle is used.

Data: Customer record, plan, billing history. Card data is held by Paddle.

Connected platform

Publishes to Instagram and reads media metadata via the Graph API.

Data: OAuth tokens you grant, Page and IG account IDs, post payloads.

Connected platform

Creates and imports designs when you use the Canva integration.

Data: OAuth tokens you grant, design IDs, exported design files.

Identity provider

Optional Google sign-in.

Data: Email and basic profile fields, only if you sign in with Google.

Connected platform

Imports files when you use the Drive import flow.

Data: Only the files you select for import.

AI model provider

Generates drafts, image edits, and renders.

Data: Brand-DNA fields, draft text, and images you upload or that we generate.

AI model provider

Generates draft text and structured outputs.

Data: Brand-DNA fields and draft text.

Product analytics

Product-event analytics and funnels.

Data: Page views, feature events, anonymized device info, user ID.

Advertising measurement

Tells our Google Ads campaign which ad click led to a sign-up.

Data: The click ID Google adds to an ad link, and the time you signed up. Only if you arrived from one of our ads, and never for visitors in the UK, the EU/EEA or Switzerland; no name or email.

Error monitoring

Captures server and client error reports for debugging.

Data: Stack frames, request context, user ID, email domain. Cookies and auth headers are stripped before send; request bodies may be included.

Data source

Resolves non-ASCII Instagram handle metadata during onboarding.

Data: Public IG handles you search for.