Zoisial legal
Sub-processors
A factual inventory of the providers that support the service. The transfer mechanism must be confirmed before launch.
| Provider | Data and purpose | Transfer mechanism |
|---|---|---|
| Gemini / Nano Banana Pro image generation from prompts derived from brand, audience and voice inputs. | Transfer mechanism not configured — counsel/ops sign-off required before launch. | |
| OpenAI | Vision tagging and focal-point detection for uploaded photographs; moderation; gpt-image-1 outpaint image editing. | Transfer mechanism not configured — counsel/ops sign-off required before launch. |
| Vercel | Application hosting and queue execution. | Transfer mechanism not configured — counsel/ops sign-off required before launch. |
| Neon | Application database. | Transfer mechanism not configured — counsel/ops sign-off required before launch. |
| Cloudflare R2 | Private object storage for customer media and exports. | Transfer mechanism not configured — counsel/ops sign-off required before launch. |
| Clerk | Authentication and account identity. | Transfer mechanism not configured — counsel/ops sign-off required before launch. |
| Stripe | Billing and subscription data. | Transfer mechanism not configured — counsel/ops sign-off required before launch. |
| Resend | Transactional email delivery. | Transfer mechanism not configured — counsel/ops sign-off required before launch. |
| Upstash | Rate limiting and transient service state. | Transfer mechanism not configured — counsel/ops sign-off required before launch. |
| Sentry | Operational error monitoring; receives a pseudonymous Clerk user ID with default PII disabled. | Transfer mechanism not configured — counsel/ops sign-off required before launch. |
| PostHog | Optional pseudonymous website analytics, loaded only after opt-in consent. Receives selected pageviews, approved campaign values, marketing CTA clicks, successful new inquiry receipts and a coarse source category and limited browser/OS/coarse device metadata; uses local-storage analytics/session identifiers, removed on opt-out. May process request IP for GeoIP enrichment and bot detection before discarding it instead of storing it with events under the enabled client-IP discard setting. The app does not attach account IDs, form fields or generated content as event properties; campaign values must match a fixed approved dictionary. Only a controlled source category is kept in session storage, with a 30-minute idle expiry; raw referrer URLs are not stored or sent. | PostHog US Cloud; the applicable transfer mechanism has not yet been confirmed. |
| Zernio Software SL | Temporary social-account connection and publishing transport for customer-directed Instagram delivery and TikTok fallback. It may receive account identifiers, authorization-related data, content, public media URLs, publishing settings, and delivery results. Final legal role and vendor terms remain under review. | Transfer mechanism not configured — counsel/ops sign-off required before launch. |
| Meta Platforms (Instagram) | Destination platform for content published at the user's direction; source of OAuth account data, post status and platform metrics. Independent controller under its own terms and privacy policy, not a Zoisial sub-processor. | Transfer mechanism not configured — counsel/ops sign-off required before launch. |
| TikTok | Destination platform for content published at the user's direction; source of OAuth account data, post status and platform metrics. Independent controller under its own terms and privacy policy, not a Zoisial sub-processor. | Transfer mechanism not configured — counsel/ops sign-off required before launch. |