Sub-processors
Last updated: 21 October 2026. The service providers that handle personal information for Opsicom.
1. What this list is
Opsicom uses other companies to run parts of the service. Each one below can see some personal information while it does its job. We only give each provider what it needs for that job.
Some providers only receive data when you turn on the feature they serve: Google Calendar, Outlook, Xero, Facebook and Instagram publishing, Sign in with Apple or Google, and voice input. How we handle personal information overall is in our Privacy Policy.
2. The list
Supabase (on Amazon Web Services)
Australia (Sydney). Some server functions run in the region closest to the request.
Database, sign-in, file storage and server functions
Data: Account and workspace data: names, emails, phone numbers, client and project records, messages, invoices, files, sign-in records
Vercel
Global (nearest location to the visitor)
Hosting for opsicom.com and app.opsicom.com
Data: IP address, browser details, the pages requested
Cloudflare
Global (nearest location to the visitor)
File storage and delivery, image resizing, upload and calendar connection services, analytics relay
Data: Files you upload, IP address, calendar connection tokens and synced calendar events while they are processed
DigitalOcean
Australia (Sydney)
Media processing: download packages, video and preview rendering, PDF documents
Data: Files and document contents while they are processed
Resend
United States
Email delivery
Data: Recipient name and email address, email content
Paddle
United Kingdom and United States
Subscription billing (merchant of record)
Data: Billing name, email, address, tax details, payment details
Stripe
United States
Payments a studio's clients make to the studio
Data: Payer name, email, payment details, invoice amounts
PostHog
United States
Product analytics and session replay with all text and typed input masked
Data: Pages visited, clicks, device and browser, approximate location from IP address, account id and email for signed-in account holders
Anthropic
United States
The Opsy assistant, Opsy's nightly suggestions, caption and campaign drafting
Data: The question asked and the workspace records needed to answer it; text used to draft captions
Groq
United States
Voice transcription when you speak to Opsy
Data: Voice recordings
United States
Sign in with Google, Google Calendar (if connected), address search and travel times, app notifications
Data: Name and email, calendar events, addresses typed or stored, device tokens and notification text
Microsoft
United States
Outlook and Microsoft 365 calendar (if connected)
Data: Email address, calendar events
Apple
United States
Sign in with Apple, notifications on iPhone and iPad
Data: Name and email (or Apple relay address), device tokens and notification text
Meta
United States
Facebook and Instagram publishing (if connected); advertising measurement (Meta Pixel and Conversions API)
Data: Page connection tokens, posts and media you publish; scrambled (hashed) email, IP address, browser details and Meta cookie ids
Xero
New Zealand and United States
Accounting integration (if connected)
Data: Invoices, client names and contact details
Open-Meteo
Switzerland and European Union
Weather forecasts for shoot days
Data: Shoot location coordinates, rounded. No names.
3. Changes
When we add or replace a provider, we update this page first. Customers on our Data Processing Addendum get 30 days notice before a new provider starts handling their workspace data. Questions or objections can be sent to support@opsicom.com.
Last reviewed 21 October 2026.