Mediastilo is operated by Nodebyte OÜ ("we", "us"). To provide the service we engage a small number of third-party providers ("subprocessors") that may process personal data on our behalf. This page lists all of them.
This list forms part of our Data Processing Agreement. We maintain it as our authoritative record of subprocessors, and we update it before any new subprocessor begins processing customer data.
Last reviewed: 20 July 2026
How we use subprocessors
Every subprocessor below is bound by a written agreement that imposes data-protection obligations at least as protective as those in our own Data Processing Agreement. We review each provider's security posture before engaging it, and we limit each one to the data it genuinely needs.
Infrastructure subprocessors
These providers host or transmit customer data as part of running the service.
| Subprocessor | Legal entity | Purpose | Data processed | Location |
|---|---|---|---|---|
| Hetzner Cloud | Hetzner Online GmbH, Germany | Application server and primary database. All application processing happens here. | All customer data | Nuremberg, Germany (EU) |
| Amazon Web Services | Amazon Web Services EMEA SARL, Luxembourg | Web frontend delivery (CloudFront, Lambda), DNS (Route 53), encrypted database backups (S3) | All customer data; request metadata including IP addresses at the CDN edge | EU |
| Amazon SES | Amazon Web Services EMEA SARL, Luxembourg | Transactional and notification email | Recipient email address, name, and email content (which may include draft titles and excerpts) | Milan, Italy (EU) |
Service subprocessors
These providers perform specific functions within the product.
| Subprocessor | Legal entity | Purpose | Data processed | Location |
|---|---|---|---|---|
| Google Gemini API | Google Ireland Limited | AI generation, analysis, translation, and embeddings. This is the model provider behind every AI feature. | Content you submit or generate: drafts, prompts, brand voice profiles, ingested source articles, uploaded documents | United States |
| Google Search (grounding) | Google Ireland Limited | Live web grounding for factual claims, where you enable it | Search queries derived from your draft content | United States |
| Stripe | Stripe Payments Europe, Ltd., Ireland | Subscription billing and payment processing | Name, email, billing address, subscription and invoice records. Card details are entered directly with Stripe and never reach our systems. | EU and United States |
| Axiom | Axiom, Inc., United States | Application performance monitoring and error tracing | Technical trace data, which may include account identifiers and request paths | United States |
International transfers
Google, Stripe, and Axiom process data in the United States. These transfers rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework where the provider is certified, and on Standard Contractual Clauses together with supplementary measures otherwise. Details are in section 9 of our Privacy Policy.
Our primary database and all application processing remain in the European Union.
Not subprocessors
Three categories of third party are commonly mistaken for subprocessors. For clarity:
Publishing destinations. When you connect a WordPress site, a Ghost blog, or a custom webhook, we send your content to a system you control, using credentials you supply. You are the controller of that transfer and we act on your instruction. These destinations are not our subprocessors, and we have no agreement with them on your behalf.
Sources you monitor. When you add a source, our servers fetch pages from that publisher's website. The publisher receives a request from our server's IP address. No customer identity or content is transmitted.
Development infrastructure. GitHub (source code, CI, container registry) and Let's Encrypt (TLS certificates) support our build and deployment process. Neither receives customer data.
Changes to this list
We will publish any addition to this list here before the new subprocessor begins processing customer data.
Customers with an active subscription may subscribe to change notifications by contacting us at the address below. If you object to a new subprocessor on reasonable data-protection grounds, contact us within 30 days of the notice and we will work with you to find an alternative. Where no reasonable alternative exists, you may terminate your subscription for the affected service and receive a pro-rated refund of any prepaid, unused fees.
Contact
Questions about this list: contact@heap-software.com