Subprocessors
Nulegal GmbH uses the processors listed below to operate SuperSocial. This page is the list referred to in our terms and in the data processing agreement we conclude with business customers under Art. 28 GDPR.
We notify customers before we add or replace a processor. To be notified, write to support@getsupersocial.me.
Processors we use to run the service
| Provider | Purpose | Data involved | Location |
|---|---|---|---|
|
Google Cloud EMEA Limited 70 Sir John Rogerson's Quay, Dublin 2, Ireland |
Hosting of the application, the database and backups | All data stored in SuperSocial, including message content | Germany (region europe-west3, Frankfurt) |
|
Unipile 168 rue de la Rotonde, 42153 Riorges, France |
Connecting your messaging accounts and relaying messages to and from the platforms you connect | Account connection data and the content of the messages that are synced or sent | France. Unipile relays some connections through proxy providers, and uses Stripe (USA) for its own billing. See the note below. |
|
Stripe Payments Europe, Limited 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland |
Payment processing, subscription management and invoicing | Name, email address, billing data, payment data | Ireland, with transfers to Stripe, Inc. (USA) under standard contractual clauses |
|
Brevo GmbH Köpenicker Straße 126, 10179 Berlin, Germany |
Sending transactional email (sign-in links, service notices) | Email address, content of the transactional email | European Union |
Note on Unipile. Unipile is the provider that actually holds the connection to WhatsApp, LinkedIn, Instagram and email on your behalf, so the messages you send and receive pass through it. It hosts data in France.
To reach some platforms, Unipile relays the connection through a proxy provider: Bright Data, Webshare, Oxylabs, Decodo or Infatica. We asked Unipile in writing what those providers can see. Their answer, from their Head of Operations on 6 August 2026, is that the connection is encrypted end to end between Unipile and the platform, so a proxy passes on traffic it cannot read. It sees the technical details needed to relay a connection — the address it is connecting to, when, and how much data — and not the content of your messages, your profile, or your login session.
An earlier version of this page said some of those proxy providers sit outside the EU. That was our own inference from a list that gave no countries, and Unipile has since told us it is not the case. We would rather correct it than leave a warning standing that overstates the position. Unipile names its providers in its own privacy policy, which is where to look for the current list rather than ours. If this matters for your use case, tell us before you connect an account.
Where your data goes because you asked for it
SuperSocial exists to connect your messaging accounts to an AI application. The AI application is chosen and connected by you, and it is not a processor engaged by us.
| Recipient | When data goes there | Data involved |
|---|---|---|
| The AI provider you connect (for example Anthropic, OpenAI, Google) | Whenever you use the connected AI application to read, search, draft or send messages through SuperSocial | The messages and contact data the AI application requests, which can include the full content of conversations |
| The messaging platform you connect (for example WhatsApp, LinkedIn, Instagram, your email provider) | When a message is sent, and continuously while an account is connected | Message content and the metadata the platform requires |
These recipients process your data under their own terms and their own privacy notices. We have no control over what they do with it. Before you connect an AI application, check whether its provider uses your data for training.
Support and administration
Nulegal GmbH uses Google Workspace (Google Cloud EMEA Limited, Ireland) for internal email and documents. If you contact support, your message is processed there.