Who handles your data
We use the providers below for the features you enable and the accounts you connect. Some process data on our instructions. Payment providers and social platforms may also act independently under their own terms. Processing locations vary by service and configuration; providers may use their own suppliers.
Cloudflare
Runs the application, database, private media storage, background tasks, Images, delivery/security services and support email routing. Relevant account data, content and technical records may pass through this infrastructure.
WorkOS
Provides hosted sign-in and identity verification for account access. It handles relevant identity and authentication data.
Support email
Cloudflare routes support@publishfy.app to an owner-operated mailbox accessed through Outlook. Messages and contact details are used for support, privacy requests and security. The mailbox product, contract variant and storage region have not been independently confirmed. See Microsoft’s privacy statement and the applicable mailbox provider’s terms. Do not send credentials or unnecessary sensitive information.
Telegram operational alerts
Operational alerts may send a short title, summary, severity, category, time and request or provider reference to the operator’s Telegram destination. Redaction reduces common secrets but cannot guarantee that all diagnostic text is anonymous. These are cloud-chat messages, not end-to-end encrypted Secret Chats. Storage and international processing follow Telegram’s privacy policy. No fixed alert-deletion deadline is promised.
Meta / Facebook
An authorised connection sends Meta the necessary account and Page identifiers, permissions and connection details. Publication sends the customer-approved image and caption to the selected Page. Meta also processes platform, authentication and security activity under its privacy policy and Platform Terms. Published posts remain subject to Facebook’s controls after disconnection.
Stripe
Handles hosted payments, subscriptions, invoices, billing controls and fraud checks. Stripe receives payment information directly; Publishfy receives relevant billing references, status and transaction records.
OpenAI
Processes relevant prompts, business information or media when a feature uses its AI services to create or check content. A coded safety identifier may also be sent. Account-specific retention, training and regional settings have not been verified; Publishfy does not promise zero data retention or immediate deletion of provider copies. Any use for another purpose, including general-purpose model training, requires a lawful basis and any required notice or consent.
fal.ai
Processes relevant prompts and media where an enabled image or video feature uses its services. Image and video generation is available only through enabled features and is subject to your plan or a separately agreed purchase.
Managed social intermediary (Zernio)
May handle connected-account identifiers, permissions, approved content and publishing results for supported connections. Zernio identifies its operator as ZERNIO SOFTWARE SL in Spain. Its published data-processing agreement and supplier list describe its own processing arrangements. Its published locations include UK infrastructure, Western European media storage and global services. Your account’s enabled connections determine whether this route is used.
Connected social platforms
A platform receives the data needed for the connection and the content you approve for it. The platform’s own privacy policy applies to its handling of that data. Check your account’s connection status for available publishing features.
Locations, changes and questions
Data may be processed outside Singapore. Publishfy is responsible for meeting the PDPA’s applicable transfer requirements, including assessing the safeguards used by its providers.
Stripe handles an explicitly requested Plus purchase only when it is offered in your account, and may continue handling existing billing records and subscription events. Managed Zernio routes, Instagram operations and fal.ai generation depend on their separate feature availability and permissions; listing a provider here does not make a held feature available. Existing historical records and lawful retention obligations are preserved. We update this information as relevant arrangements change and provide additional notice or follow agreed objection procedures where required by law or your data-processing agreement. Ask support@publishfy.app for information about the applicable provider entity, role, location or safeguards for your use. Our Privacy Policy explains purposes, retention and your rights.