Subprocessors
Last updated: September 15, 2026
GraniteAI, LLC uses the third-party subprocessors below to deliver Mica. This is the current list referenced in our Privacy Policy. We remain responsible for our subprocessors’ performance of the obligations we owe you, and we will update this page before adding a new subprocessor that materially changes how your data is processed.
| Subprocessor | Purpose | Data processed | Privacy |
|---|---|---|---|
| Clerk | Authentication, accounts, billing checkout | Name, email, sign-in metadata, subscription status | Policy |
| Stripe (via Clerk Billing) | Subscription payment processing | Payment card details (collected by Stripe), billing email | Policy |
| Publer | Publishing content to connected social accounts | Generated media + captions, target account IDs, scheduling metadata | Policy |
| OpenAI | AI content generation, vision, judge, and revision passes; caption timing for Reels voiceovers | Customer Inputs + intermediate prompts/completions, and voiceover audio for caption timing (excluded from model training) | Policy |
| Hugging Face | Route text-to-speech requests to the model host | Voiceover text and request metadata | Policy |
| DeepInfra | Generate spoken voiceovers for Reels | Voiceover text; your voice reference recording and the voice profile made from it, if you use your own voice | Policy |
| Neon | Database hosting | Structured data: tenants, posts, media metadata, telemetry | Policy |
| Vercel | Application hosting + media object storage | Dashboard app, uploaded/generated media blobs | Policy |
| Resend | Transactional + lifecycle email delivery | Recipient email address, message content | Policy |
| Meta Platforms (Instagram Graph API) | Read organic Instagram Reels performance data for Mica Social Media Analyzer subscribers | The access token you grant our Meta app; requests for your own Reel metadata and insights. Read-only, no publishing permission | Policy |
| Google (Business Profile APIs) | Read the owner's view of a Google Business Profile for Mica Social Media Analyzer subscribers who connect one | The token you grant our Google app; requests for your own profile's performance metrics, business information, and reviews | Policy |
| Google (Secret Manager) | Secure storage of Instagram and Google Business Profile tokens for Analyzer subscribers | Your encrypted Instagram access token and, if connected, your encrypted Google Business Profile token | Policy |
| Google (Places / Business Profile) | Google Business Profile data retrieval | Business name, address, phone to look up your listing; public rating + reviews returned | Policy |
| PostHog | Product analytics and session replay | Usage events, page views, session recordings, account identifiers (name, email) | Policy |
| HubSpot | Customer relationship management (CRM) | Customer and prospect contact and business records | Policy |
| Slack | Internal notification to us when something needs a person | Business name, account email, account identifier | Policy |
| Google Cloud Platform | Scheduled content-generation processing, and the face-matching service described in Section 2.8 of the Privacy Policy for tenants who have enrolled people with their consent | Tenant data processed transiently during scheduled generation jobs; for enrolled tenants only, uploaded photos sent to our own face-matching service running on Google Cloud Run | Policy |
| GitHub | Scheduled workflow processing | Tenant data processed transiently during scheduled workflow runs | Policy |
| Meta (Facebook / Instagram) | Connected publishing platforms | Whatever the platform API requires to publish on your accounts | Policy |
Questions about our subprocessors? Email privacy@graniteai.co.