01
The list
| Company | Location | What it does | Data it sees |
|---|---|---|---|
| Contabo GmbH | Germany; the server is in France (EU) | Hosting: the dashboard, the API, the database, queues and the publishing worker | Everything stored in Reelspan: account details, connected-account tokens (encrypted), posts and their results, logs |
| Cloudflare, Inc. | United States; global network | DNS, CDN and attack protection for every Reelspan site; R2 storage for uploaded media and media library files | Requests to Reelspan (IP address, browser), and the videos, photos and PDFs you upload |
| Zoho Corporation | United States data centre | Email delivery: sign-in codes, invitations, notifications and support replies | Email addresses and the content of those emails |
| Lemon Squeezy, LLC (a Stripe company) | United States | Merchant of record: checkout, subscriptions, invoices, sales tax and refunds | Name, email, billing address and payment details. Reelspan never receives card numbers |
| Functional Software, Inc. (Sentry) | United States | Error reports from the dashboard, the API and the worker, so problems are fixed fast | Technical details of an error, which can include a user or workspace id and the request’s address |
| OpenRouter, Inc. | United States | AI captions: passes requests to the model chosen in our settings (today Anthropic’s Claude for writing and Google’s Gemini for speech), without training on them | Only when you use AI captions: frames and audio of that video, and the text you give |
| Google LLC | United States | Sign in with Google; Google Analytics on reelspan.com (not in the dashboard or the API) | Name, email and picture when you sign in with Google; visits to the marketing site |
02
Not on this list
- The social networks you post to (TikTok, YouTube, Instagram, Facebook, X, Threads, LinkedIn, Pinterest, Bluesky). You choose them and connect them yourself, so each one receives your posts under its own terms, as your recipient rather than our subprocessor.
- Tools that never see customer data, such as our code host and the uptime monitor, which runs on our own server.
03
Transfers outside the EU
Your data is stored on our server in the EU. Where a company above is in the United States, the transfer relies on the EU–US Data Privacy Framework where that company is certified, and on the European Commission’s Standard Contractual Clauses in its data processing terms otherwise.
04
Changes
We update this page at least 14 days before a new subprocessor starts handling personal data, as our Data Processing Addendum promises. To be emailed about changes, or to object to one, write to [email protected].