Subprocessors
Last updated November 10, 2026
These companies process personal data for the Chockstone Labs social media service on our behalf, each only for the purpose listed, under data-protection terms at least as protective as our Data Processing Addendum. We post a change here, and email customers’ owners, at least 30 days before adding or replacing one. Our Privacy Policy names the same providers.
| Subprocessor | What it does for us | Data it handles | Where |
|---|---|---|---|
| Replit, Inc. | Hosts the service, its database and its stored files | All service data | United States |
| Clerk, Inc. | Sign-in, account verification and invitation emails | Customer users’ names, emails and sign-in identifiers | United States |
| Stripe, Inc. | Payments for paid plans: checkout through Link (Stripe’s seller of record), invoices and the billing portal | The paying owner’s name, email, billing address and payment details, entered on Stripe’s and Link’s pages (we never see or store card numbers) | United States |
| PostHog, Inc. | Product analytics: page views on chockstonelabs.com, the sign-up-to-first-post steps, and the iPhone app’s usage and crash reports | Event names, the sign-in user id, space and workspace ids, network and plan names, and counts; on the public site a random in-memory visitor id, the page path and referrer without query strings, and browser and device type. Never captions, comments, messages, handles, names or emails. Location lookup is off, and the site’s traffic goes through our own proxy, which does not pass on the visitor’s IP address | United States |
| Cloudflare, Inc. | The chockstonelabs.com domain’s DNS, the outside uptime check, and receiving brand email a Customer forwards to its deals address | Domain lookups; forwarded brand emails (sender name and address, subject and message), passed straight to the service and not kept by Cloudflare | United States / global |
| Google LLC (Google Workspace) | Our email: support, sign-up requests and messages people send to our addresses | Names, email addresses and what people write to us | United States |
| Anthropic, PBC | Runs Claude for in-app writing, edit instructions and format suggestions | The text and still frames of a customer’s posts and videos needed for each request, and what the customer typed to ask for it | United States |
| TypeSafe | Answers yes-or-no and pick-one questions about short pieces of text | Post text, transcripts, captions and comments, without names or contact details | United States |
| Google LLC (Gemini API) | A closer look at a video’s frames, only when other checks cannot settle a question | A few still frames from a customer’s video | United States |
| Apple, Google and Mozilla browser push services | Deliver the notifications a Customer user turns on in their browser | Notification text and the browser’s push address | United States / global |
| Apple Inc. (Apple Push Notification service) | Delivers the notifications a Customer user turns on in the iPhone app | Notification text and the device’s push token | United States / global |
Not subprocessors
Instagram (Meta), TikTok, YouTube (Google) and the other networks a customer connects, Canva when a customer connects it, the blogs and feeds a customer adds, and any AI assistant a customer connects, such as Claude, ChatGPT or Codex, are not our subprocessors. The customer chooses to send data to them, and their own terms apply.
Questions
Questions about this list may be sent to hello@chockstonelabs.com.