Legal
Subprocessors
Last updated May 12, 2026
To run Unison we rely on a small set of vendors ("subprocessors"). They process personal data only on our instructions and under a written data-processing agreement. We review the list below at least annually and update it whenever we add or remove a subprocessor.
Infrastructure
| Vendor | Purpose | Region | Personal data |
|---|---|---|---|
| Amazon Web Services | Compute, object storage (S3), KMS | US | All customer data at rest |
| Vercel | Edge hosting for the marketing site | Global edge | Visitor IP, request metadata |
| Neon (managed Postgres) | Primary application database | US | Account, posts, inbox, encrypted credentials |
| Cloudflare | DNS and DDoS protection | Global | Visitor IP, request metadata |
Customer-facing services
| Vendor | Purpose | Region | Personal data |
|---|---|---|---|
| Stripe | Payment processing, billing | US, EU | Billing email, country, postal code, card token |
| Postmark | Transactional email (verifications, receipts, alerts) | US | Email address, message body |
| Sentry | Application error monitoring | US | IP, user agent, stack trace, account ID |
Optional AI assistance
These are called only when you actively trigger an AI feature inside Unison, with the snippet you explicitly send. We do not send your inbox or posts in bulk, and these vendors do not train on the data we send.
| Vendor | Purpose | Region |
|---|---|---|
| Anthropic | LLM responses for AI assist | US |
| OpenAI | LLM responses for AI assist | US |
Connected social networks
When you publish a post or fetch replies, the relevant data is sent to the network you chose. Each network is an independent controller of the data on its own platform.
- X (xAI / X Corp.)
- Meta Platforms, Inc. (Instagram, Facebook, Threads)
- LinkedIn Corporation
- TikTok Pte. Ltd.
- Google LLC (YouTube)
- Pinterest, Inc.
- Bluesky Social, PBC
- Mastodon (the operator of the instance you connect)
- Telegram FZ-LLC
Notification of changes
We notify customers by email or in-app notice at least 30 days before adding a new subprocessor that processes customer personal data, so you have time to object. To receive these notices reach out to hello@unison.ink.