Who else touches your data
Why this page exists
To run your business's social media, the system calls services we do not own: it generates video, writes copy, stores files, sends mail. Those companies are called sub-processors. European law says you get to know who they are — and not just the names, but what each one sees.
We do not sell data and we do not share it with anyone outside this list. There is no third-party advertising or analytics on this site.
Who processes what
| Company | What for | What it sees | Where |
|---|---|---|---|
| Language models for copy and replies; sign-in with Google | Brand description, post copy, the messages being replied to | USA | |
| BytePlus | Video generation | Scene description and your own product images | Singapore |
| fal.ai | Image and video generation | Scene description and your own product images | USA |
| Cloudflare | Storage for finished images and video; backups | Media files; backups also contain account state | EU / global |
| Apify | Collecting public data about competitors and audience | The public links you point it at | EU (Czechia) |
| Meta | Publishing to Instagram and Facebook, reading comments and DMs | Your posts and conversations, in your own accounts | USA / EU |
| Publishing and reading responses | Same as above | USA / EU | |
| TikTok | Preparing and publishing video | Same as above | USA / EU |
| Mail provider | Service mail: confirmations, password resets, invitations | Recipient name and email address | EU / USA |
| Payment provider | Taking payment; it is also the merchant of record | Payment details — we never see or store them | EU / USA |
| Hosting | The server the system runs on | All application data at rest | EU (Germany) |
What depends on you
A social network appears in this list only once you connect it. If you never connect TikTok, nothing goes there. The same holds for competitor research: it runs when you run it.
Models are called when you ask for something to be generated, or when the reply autopilot is on. Autopilot off means your customers' messages go nowhere.
How we hold your social media access
Access tokens are stored encrypted. Backups of system state live in a separate, closed bucket — not the one images are served from. That split is deliberate: the image bucket is public by design, because otherwise Instagram could not fetch media from a link.
Changes
When the list changes, we update this page and the date at the top. If a provider that sees your customers' data is replaced, we tell you at your account address in advance.
Questions
Write to mikhail@agenticos.agency or use the contact form. General processing rules are in the privacy policy.