Subprocessors

1. How we select subprocessors

Before engaging any vendor that may process personal data, we assess its security practices, its compliance with the GDPR and other applicable data protection laws, and the contractual guarantees it offers.

All of them sign a data processing agreement requiring them to act only on our instructions, maintain confidentiality and report incidents.

2. Payments

PCI DSS certified payment processor: subscription processing, recurring billing, refunds and fraud prevention. Processes name, email, billing data and transaction identifiers, operating in the United States and the European Union.

When the platform operator enables other local payment methods, the corresponding processor acts for the same purpose under an equivalent agreement.

3. Infrastructure and storage

Hosting and database provider: running the application and storing content, schedules and access logs.

Amazon S3-compatible object storage: media library, attachments and backups.

Transactional email provider: account confirmations, password recovery, billing notices and product notifications.

4. Artificial intelligence providers

Used only when you trigger an AI feature. They receive the prompt content and the material you selected, and are contractually prohibited from using it to train models.

• Anthropic: text generation and rewriting.
• OpenAI: text and image generation, depending on the configured feature.
• Any other provider enabled by the platform operator in the AI settings.

5. Destination platforms

Meta (Facebook and Instagram), LinkedIn, TikTok, X and other connected networks receive the content you choose to publish and the data required to publish it.

Those platforms act as independent controllers of the data they already hold about you and your audience, under their own policies.

6. Usage analytics

Google Analytics: aggregate navigation metrics on the public pages, active only when the operator enables it and you consent to analytics cookies.

7. Changes to this list

Before adding a new subprocessor that would handle customer personal data, we give at least 30 days' notice by email or in the dashboard.

If you have a reasoned objection, write to socio@sociosai.com. If we cannot resolve it, you may cancel your subscription without penalty and receive a pro-rata refund of the unused period.