Service providers
These companies help us run Octoque and may process personal data for us. Each is bound by a written contract that limits them to providing their service, requires security safeguards and passes the same duties to anyone they use. We never sell data to anyone.
| Provider | What they do | Data involved | Location |
|---|---|---|---|
| Paddle.com Market Limited | Merchant of Record: checkout, payments, tax, invoices, refunds | Account email, country, plan, payment details (Paddle only) | UK, EU, US |
| Social publishing infrastructure provider | Connects your accounts and delivers your posts to the platforms; holds platform access tokens | Post media and captions, account handles, access tokens | United States · name available to business customers on request |
| Fly.io, Inc. | Cloud hosting: runs the Octoque service and its background jobs | All account and content data, while it is processed | EU (Frankfurt, Germany) |
| Supabase, Inc. | Database: stores your account, workspace, posts and results | All account and content data | EU (Frankfurt, Germany) |
| Cloudflare, Inc. (R2) | File storage: stores your uploaded videos and photos, and our database backups | Media files; database backups | European Union (EU jurisdiction) |
| Vercel Inc. | Website hosting: serves the website and app pages; pages are built in Frankfurt and delivered from the location nearest you | IP address and the pages requested; account data passes through on its way to you | EU (Frankfurt), delivery worldwide |
| AI model providers (Octoque AI) | Write captions, titles, descriptions, hashtags, ideas, replies, post topics, the daily comment summary and the mood and topic of mentions (if switched on); pick clip moments | What you ask, captions, a few small video frames, what was said in the video, recent comments for the summary, mention snippets. Zero data retention, no training | United States · names available to business customers on request |
| Speech-to-text provider | Turns a video's sound into text when you use Octoque AI or Find clips on it | The video's sound only. Not kept, no training | United States · name available to business customers on request |
| Google (YouTube Data API) | Searches YouTube for the keywords you track in Mentions (Studio) | The keyword only | United States |
| Bluesky PBC (public search API) | Searches public Bluesky posts for the keywords you track in Mentions (Studio) | The keyword only | United States |
| X Corp (optional) | Searches X for the keywords you track in Mentions, only if X is switched on for your workspace | The keyword only | United States |
| Google (Sign in with Google, optional) | Confirms who you are when you choose Continue with Google (Google acts as its own controller for your Google account) | That you’re signing in to Octoque; we receive your name, email, its verified status and Google account ID | United States |
| Resend | Sends service emails | Name, email, email content | EU / US |
| PostHog | Product analytics, only with your consent where required | Event names, a random device ID | EU (Frankfurt) |
| Error monitoring | Finds and fixes bugs | Technical error details, IP address | EU / US |
Connected platforms aren’t on this list
Instagram, Facebook, TikTok, YouTube, LinkedIn and X receive your posts because you connect them and ask us to publish. They aren’t our service providers: they handle your data under their own privacy policies. The same goes for their ad systems when you boost a post: the ad runs on your own ad account, and the platform charges your own payment method; ad money never passes through us.
Changes
We email workspace owners on paid plans at least 30 days before we add or replace a provider, and update this page. If you object on reasonable data protection grounds and we can’t resolve it, you can end your plan and get a refund of any unused prepaid period. Business customers can ask for the full named list, or to get change notices at another address, by writing to hello@octoque.com.