Sub-processors
We use these service providers to run Blog Automation for you. The list is annex 2 of our data processing agreement.
This English version is a convenience translation. Only the German version is legally binding: Unterauftragsverarbeiter.
Last updated: 23 October 2026
When you use Blog Automation, we process personal data as a processor on your behalf (Art. 28 GDPR). For some tasks we use other service providers, known as sub-processors. This page applies to the Blog Automation app. For the website blog-automation.com, the privacy policy applies.
Current sub-processors
| Provider | Purpose | Registered office/location | Legal basis |
|---|---|---|---|
| STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany | Data centre and servers for the app and its database (we operate the servers ourselves) | Germany | Data processing agreement under Art. 28 GDPR |
| OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland | Creating and revising texts (model gpt-6-astra) and creating images (model gpt-image-2) | Seat in Ireland; the app uses OpenAI's general API without a fixed data region, so processing by affiliates or third parties outside the EEA, in particular in the USA, is possible | OpenAI data processing addendum under Art. 28 GDPR; outside the EEA standard contractual clauses or adequacy decision (Art. 45 GDPR) |
| IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany | Sending the app's e-mails (sender noreply@blog-automation.com), for example login codes, invitations and notifications | Germany | Data processing agreement under Art. 28 GDPR |
Notes on OpenAI: texts and image requests are only sent to OpenAI for the respective action. The app asks OpenAI not to store the responses (parameter "store: false"). OpenAI states that data sent via its API is not used to train its models. OpenAI keeps abuse monitoring logs for up to 30 days by default, unless the law requires longer retention.
Your own AI keys (Pro plan)
In the Pro plan, you can store your own API keys, for example from OpenAI, Anthropic (Claude), Google (Gemini) or OpenAI-compatible providers such as Mistral or OpenRouter. Actions run through your own key are carried out by the respective provider under your own contract with it. That provider is then not our sub-processor. In this case, you conclude a data processing agreement directly with the provider.
Service providers that are not sub-processors
Stripe (payment processing): We bill paid plans and token packs through Stripe. The contracting party for customers in the European Economic Area is Stripe Payments Europe, Limited, Dublin, Ireland. Stripe only processes the contract and payment data of your customer account, not the content you process in Blog Automation. Stripe acts partly on our behalf and partly under its own responsibility, for example for fraud prevention and to meet legal obligations. In doing so, Stripe transfers data to Stripe, LLC in the USA; according to Stripe, Stripe, LLC complies with the EU-U.S. Data Privacy Framework, and Stripe also uses standard contractual clauses. Stripe is therefore not a sub-processor for your content.
Website blog-automation.com: our website runs on our own server at IONOS SE in Germany. It does not process any content from the app.
Changes to this list
Before we add or replace a sub-processor, we inform you in advance (Art. 28 (2) GDPR):
- We inform the owners of your account by e-mail, as a rule at least four weeks before the change, and update this page with a new date.
- You can object to the change within four weeks of our information for an important data protection reason, informally by e-mail to info@blog-automation.com.
- We then look for a solution together with you. If we find none, you can cancel the services concerned. Details are set out in § 7 of the data processing agreement.
Contact
We are happy to answer questions about our sub-processors by e-mail at info@blog-automation.com, by phone at +49 69 34 87 77 44 or via the contact form. The DPA applies in every plan; on request, you get a copy from our support team.