Sub-Processors
Last updated: June 27, 2026
Amelia Vibe uses the following third-party sub-processors to deliver our Services. We keep this page current whenever we add or remove a sub-processor, and notify existing customers by email. This page is provided for transparency and to support our obligations under GDPR Article 28.
Infrastructure & Data Storage
| Sub-Processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Supabase, Inc. | Managed PostgreSQL database, authentication, file storage | Account data, OAuth tokens, user content, integration data | United States (AWS us-east-1) |
| Vercel, Inc. | Application hosting, edge functions, CDN | HTTP request data, session cookies, server-side logs | United States (global edge) |
| Upstash, Inc. | Serverless Redis (rate limiting) | Rate limit counters (no PII) | United States (AWS us-east-1) |
Analytics & Monitoring
| Sub-Processor | Purpose | Data Processed | Location |
|---|---|---|---|
| PostHog, Inc. | Product analytics, feature flags, session insights | Anonymised usage events, page views, device/browser info, user ID | United States (US Cloud) |
| Functional Software, Inc. (Sentry) | Error monitoring, performance tracing | Error stack traces, request metadata, browser/OS info, user ID for issue correlation | United States |
AI & Content Generation
| Sub-Processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Anthropic, PBC | Primary AI model for post generation, alignment scoring, style analysis | User-provided prompts, topics, writing patterns, file contents (when user requests drafts). Inputs retained up to 30 days for abuse/safety monitoring only; not used for model training. | United States |
| OpenAI, Inc. | Image generation, audio file transcription (Whisper), content moderation | User-provided prompts, image-generation prompts, uploaded audio files for transcription, draft content for moderation checks. Inputs not used for model training (API data use policy). | United States |
| Deepgram, Inc. | Real-time speech-to-text for voice dictation | Voice/audio you record for dictation, streamed for live transcription into text. We opt out of Deepgram's model-improvement program, so your audio is not used to train their models and is retained only for the time needed to process each request. | United States |
Content Retrieval
When you share a link, Amelia retrieves the public content at that web address so it can draft from it — for web articles and for posts on platforms like X, Instagram, Reddit, and YouTube. For some platforms we use independent third-party services to do this: we pass along the web address and they return its public content in real time. LinkedIn links are the exception: we never pass them to these services, and Amelia accesses LinkedIn only through LinkedIn’s official APIs and publicly available information.
We don’t sell, rent, or broker your data, and Amelia is not a data broker. We use the content you share only to help write your posts.
Payments
| Sub-Processor | Purpose | Data Processed | Location |
|---|---|---|---|
| Stripe, Inc. | Payment processing, subscription management, invoicing | Name, email, payment method details, billing address, transaction history | United States |
Third-Party Platform APIs
The following platforms are accessed on your behalf when you connect an integration. Data is sent to these platforms only to perform actions you have authorised.
| Platform | Purpose | Data Processed | Location |
|---|---|---|---|
| LinkedIn (Microsoft Corp.) | Publish posts, retrieve analytics | OAuth tokens, post content, analytics metrics | United States |
| X Corp. | Receive DM content, read bookmarks | OAuth tokens, DM messages, bookmark data | United States |
| Google LLC | Google Sign-In, Google Drive file sync | OAuth tokens, email, Drive file names/metadata/contents from selected folder | United States |
| Microsoft Corp. | OneDrive file sync | OAuth tokens, email, OneDrive file names/metadata/contents from selected folder | United States |
Data Processing Agreement
If your organisation requires a Data Processing Agreement (DPA), please contact us at amelia@ameliavibe.com. We’ll make our standard DPA available for signature. It sets out how we process your data and discloses the sub-processors listed on this page.
Changes to This List
We will update this page whenever we add or remove a sub-processor. If you have subscribed to sub-processor change notifications (via your account settings or by emailing us), we will notify you by email when a new sub-processor begins processing personal data.
Contact
Questions about our sub-processors? Contact us at amelia@ameliavibe.com
Amelia Vibe, LLC
777 Brickell Ave, Suite 500 PMB 1083
Miami, FL 33131, United States