Sub-processors
Everyone outside us who can see data from TheJay, and why that is.
This list belongs to the Data Processing Agreement and the privacy statement. If a party is added, we give at least 30 days' notice by email and you may object.
In use today
| Party | For what | Which data | Where |
|---|---|---|---|
| Nodge hosting |
Running the application, the database, and backups | Everything in TheJay, including your uploaded files | TODO — confirm region and establishment |
| Starting Up core |
Your account and sign-in, the shared CRM, and passing an AI request onward | Email address, workspace and brand, and the content of an AI request | EU — same undertaking, different service |
| Anthropic AI |
Writing a caption or text — only if you use the AI feature | The details of that one post: title, release, date, and the context TheJay sends with it | United States |
| Mollie B.V. payments |
Charging your subscription, through Starting Up | Name, email address, amount, payment details | The Netherlands (EU) |
About Starting Up. Today that is the same undertaking as TheJay, but a separate service with its own database — so it gets its own row here rather than being left out. If either ever moves to another company, only the "where" column changes, and you get 30 days' notice.
About AI. Nothing goes to an AI provider unless you press the button to have text written. What goes with it is the context of that one post — not your network, not your notes, not your music files. If you do not press it, this never happens; there is also a variant that composes the text without a model.
Transfers outside the EEA
Only Anthropic processes outside the EEA. For that, the European Commission's Standard Contractual Clauses apply, together with Anthropic's own processing terms.
Present in the product, but not in use
The following is in the software but not switched on in production today. No data goes to it.
- Instagram and Facebook (Meta), TikTok, YouTube (Google) and LinkedIn — publishing. No key is configured, so no account can be connected.
- Object storage (S3) — for large files. Not configured, so all uploads currently sit in the database at the hosting provider above, with a 12 MB per-file limit. Once this is switched on your browser uploads straight to that storage, and the provider moves into the table above. TODO — fill in the storage provider's name, country and place of business before the first upload
If we switch any of these on, it moves into the table at the top first and you get 30 days' notice.
What are not sub-processors
Social platforms you post to
When you publish to Instagram, TikTok, YouTube or LinkedIn, you give that instruction and it goes there directly, through your own connected account. That platform is a recipient on your instruction, not our sub-processor; what they do with it is in their own terms.
People you send a link to
When you send a demo or release link, you decide who gets it. We do not send those messages for you and do not see who you sent them to, unless you record the recipient in TheJay yourself.