Notice of changes. We give at least 30 days’ advance notice of new Sub-processors via email to Customer-designated contacts and through updates to this page. Customers may object on legitimate grounds during the notice period as described in Section 6 of the DPA.
Current Sub-processors
| Sub-processor | Purpose | Entity / location | Data categories |
|---|---|---|---|
| Railway | Cloud hosting (application servers, PostgreSQL, Redis, object storage) | Railway Corp. — United States | All Personal Data processed by the Service |
| Clerk | Authentication, session management, user identity | Clerk Inc. — United States | Email, name, profile photo, password hash, session metadata |
| Resend | Transactional email (account, billing, notifications, password reset) | Resend Inc. — United States | Email addresses, message content |
| Meta Platforms (Graph API) | Pulls Page data and publishes content at Customer's instruction | Meta Platforms Inc. — United States / global | Platform Data the Customer authorises |
| Plausible Analytics | Cookieless web analytics for the public site | Plausible Insights OÜ — Estonia (EU) | Aggregated, non-personal usage metrics |
| PostHog (when enabled) | Product analytics inside the signed-in dashboard | PostHog Inc. — United States (EU region available) | Pseudonymised user IDs, feature usage events |
| Sentry | Error monitoring and performance traces | Functional Software, Inc. — United States | Truncated stack traces, request metadata, optionally Personal Data scrubbed before send |
Why each Sub-processor exists
- Railway is our primary infrastructure provider. The Service runs as managed containers next to a managed Postgres database, managed Redis instance, and managed object storage bucket, all inside a single Railway project.
- Clerk handles authentication for the dashboard, including MFA, SSO, password storage, and session management. We do not store passwords ourselves.
- Resend delivers transactional emails: confirmation, password reset, billing receipts, and product notifications.
- Meta Platforms is the source and destination for the Pages-related operations the Customer authorises through OAuth.
- Plausible measures aggregate visitor patterns on the marketing site without setting cookies or collecting personal identifiers.
- PostHog, when enabled, captures feature-usage analytics inside the signed-in dashboard to inform product improvements. Operated in cookieless mode for anonymous visitors.
- Sentry records errors and performance traces. Sensitive fields are scrubbed before transmission.
International transfers
Several Sub-processors are located outside the EEA, UK, or Switzerland. Where required, transfers are governed by the European Commission’s Standard Contractual Clauses (Module Three for Processor-to-Processor) and the UK IDTA, as described in our DPA.
Update mechanism
Customers who wish to be notified by email when this list changes should write to admin@feedrevo.com with the subject “Sub-processor Updates Subscription” and the contact email to register.
Contact
For questions about Sub-processors or to object to a proposed change, email admin@feedrevo.com.