Subprocessor Register
Third-party service providers authorized to process data on behalf of Opimatic customers.
1. Overview & Subprocessor Policy
Opimatic utilizes third-party service providers ("Subprocessors") to perform various system functions necessary to provide our omnichannel social media automation, conversational inbox, and post-scheduling platform.
Prior to engaging any Subprocessor, Opimatic conducts rigorous technical, operational, and legal due diligence to ensure they maintain data protection standards equivalent to those required under GDPR, UK GDPR, and CCPA/CPRA, including executing Data Processing Agreements containing European Commission Standard Contractual Clauses (SCCs).
2. Hosting & Infrastructure Subprocessors
These entities provide essential cloud server hosting, database security, and content delivery network (CDN) infrastructure for the Opimatic ecosystem:
| Entity Name | Service Provided | Processing Location |
|---|---|---|
| Amazon Web Services (AWS) | Cloud Server Infrastructure & Encrypted Database Storage | USA / EU (Ireland) |
| Cloudflare, Inc. | DNS Routing, Web Application Firewall (WAF), & CDN Acceleration | Global Network |
| Google Cloud Platform | Backup Storage & Microservices Architecture | USA / EU |
3. Communication & Channel API Subprocessors
To enable multi-channel social media integration and messaging automation, Opimatic connects with the following platform APIs:
| Entity Name | Service Provided | Processing Location |
|---|---|---|
| Meta Platforms, Inc. | WhatsApp Business API, Instagram Graph API, Facebook Messenger API | USA / Global |
| Twilio Inc. | SMS Delivery & WhatsApp Gateway Integration | USA / EU |
| X Corp. (Twitter) | X API (Social Media Posting & Analytics) | USA |
| LinkedIn Corporation | LinkedIn Marketing & Publishing API | USA |
4. AI & Analytics Subprocessors
These providers power our optional AI content generation features and internal operational analytics:
| Entity Name | Service Provided | Processing Location |
|---|---|---|
| OpenAI, LLC | AI Content Generation & Conversational Suggestions | USA |
| Google LLC (Gemini API) | Natural Language Processing & Smart Auto-Replies | USA |
| PostHog Inc. | Product Analytics & System Usage Telemetry | EU / USA |
5. Billing & Support Subprocessors
These sub-processors manage customer subscription payments and customer care infrastructure:
| Entity Name | Service Provided | Processing Location |
|---|---|---|
| Stripe, Inc. | Payment Processing & Recurring Subscription Management | USA / Global |
| Intercom, Inc. | Customer Support Ticketing & Live Chat Operations | USA / EU |
6. Updates & Right to Object
Opimatic will notify registered account owners via email or dashboard notification at least 14 days prior to authorizing any new Subprocessor. Customers on Enterprise or Agency plans may subscribe to receive direct technical notifications regarding Subprocessor changes.
Under our Data Processing Agreement (DPA), Customers have the right to object to the appointment of a new Subprocessor on reasonable grounds related to data protection by contacting our legal team within 10 business days of notification.
7. Contact Compliance
If you have any questions about our Subprocessor management or wish to receive formal updates regarding changes to this register, please reach out to our privacy team:
Subprocessor Inquiries: privacy@opimatic.com
Data Protection Officer: dpo@opimatic.com