Legal
Subprocessors
Last updated April 14, 2026
Instafront uses the third-party providers listed below to deliver the service. Each is bound by written terms consistent with our Data Processing Addendum. We give at least 30 days' notice before adding or replacing a subprocessor. Subscribe at legal@instafront.app to be notified.
| Provider | Purpose | Location | Data types |
|---|---|---|---|
| Railway | Application and worker hosting; primary Postgres database. | United States (primary region); EU region for EU-tenanted projects | Account data, site content, encrypted Instagram tokens, AI annotations |
| Cloudflare | R2 object storage for mirrored media; CDN for generated sites; Images for transformations; DNS and custom-domain SSL; Web Analytics (cookieless, bot-filtered) | Global edge; primary object-storage region: EU (Frankfurt) | Media files, public site HTML/CSS/JS, aggregated site traffic |
| Dodo Payments | Merchant of record for subscription billing; tax and VAT calculation; chargeback handling | Global; primary: India / Singapore | Name, email, billing address, card token, invoice history |
| Resend | Transactional and marketing email delivery | European Union (eu-west region) | Name, email, message content |
| Sentry | Error monitoring across dashboard, API, workers, and generated site builds | United States (primary); EU region available | Stack traces, request metadata; PII redacted before export |
| June.so | In-dashboard product analytics: funnels and feature usage | United States | Pseudonymized user IDs, dashboard event names |
| Inngest | Background job orchestration: Instagram polling, post processing, site rebuilds | United States | Event payloads referencing user IDs and post IDs; no raw media |
| Anthropic | AI vision and text analysis for post categorization (primary provider) | United States | Public Instagram post content (captions, media URLs) |
| OpenAI | AI vision and text analysis. Failover / alternative provider | United States | Public Instagram post content (captions, media URLs) |
| AI vision and text analysis. Failover / alternative provider. Optional Google login | United States / Global | Public Instagram post content; for Google login, email and profile name | |
| Meta Platforms, Inc. | Source of Instagram content and Facebook Login identity | Global | Your Instagram public profile and media, as permitted by the scopes you approve |
Changes
We will post any addition or replacement here at least 30 days before the new provider starts processing Customer Data. Customers who have subscribed to updates will also be emailed. If you object for reasonable grounds under our DPA, contact us at legal@instafront.app.