Subprocessors
Last updated: February 24, 2026
In accordance with GDPR Article 28, we maintain a list of subprocessors (third-party service providers) that process personal data on our behalf to provide the Pablito Service.
| Subprocessor | Purpose | Location |
|---|---|---|
| MongoDB Atlas | Cloud database hosting — stores all user data, artworks, and metadata | Cloud (EU/US) |
| Cloudinary | Image and video hosting, storage, and CDN delivery | US |
| Stripe | Payment processing — subscription billing, invoicing | US |
| Resend | Transactional email delivery — verification, notifications | US |
| Google (Gemini API) | AI-powered image analysis — artwork tagging and categorization | US |
| Unipile | Instagram integration proxy — account connection and messaging | EU |
| Render | Web application hosting — backend API and frontend serving | US |
| OpenAI | AI text generation — posting-schedule generation | US |
| Anthropic (Claude) | AI text generation — captions, hashtags, and artist documents | US |
| PostHog | Product analytics — usage and behavior events (consent-gated) | EU/US |
| Sentry | Error monitoring and performance diagnostics | US |
| Cloudflare | Custom-domain hosting for published artist websites (SSL, routing) | US / Global |
Changes to Subprocessors
We will notify Professional Users via email at least 14 days before adding new subprocessors or making material changes to existing ones. Professional Users may object to new subprocessors by contacting privacy@pablito.app within the 14-day notice period. If we cannot reasonably accommodate the objection, the user may terminate their subscription. This page will be updated whenever subprocessors change. We recommend checking this page periodically.
Data Transfer Safeguards
For subprocessors located outside the European Economic Area (EEA), we ensure appropriate safeguards through Standard Contractual Clauses (SCCs) or European Commission Adequacy Decisions. You may request copies of these safeguards by contacting privacy@pablito.app.
Contact
For questions about our subprocessors or data processing: privacy@pablito.app