Service providers and subprocessors

Operator

Matej Lukášik, business ID 50113801, Ulica Hlboká 5943/14, 91701 Trnava, is responsible for provider selection. Questions: matej@post.work.

Public website and security

• Cloudflare — public-site delivery, security, network protection, and Turnstile.
• Google Fonts — public-site typography; Google receives technical network data when a font is requested.
• Plausible Analytics — optional aggregated public-site analytics after consent.
• PostHog EU — optional product analytics and, if separately enabled, masked session replay after consent.

Application and service delivery

• Infrastructure hosting and database provider — application, database, and backup operation. The specific provider and processing location are confirmed in the customer contract or DPA where post.work processes customer personal data.
• Mailgun EU — transactional email where the email function is enabled.
• Stripe — technical-audit payments and subscriptions; Stripe may also act as an independent controller for parts of payment processing.
• Google and Apple — external sign-in or integrations only where enabled by the user or customer.
• OpenAI, DeepSeek, or another agreed model/API provider — only for customer automations that explicitly use it. Scope, role, and transfer terms depend on the configuration and contract.

Changes and international transfers

We involve a provider only as needed for a specific function. For transfers outside the EEA, we use the applicable GDPR Chapter V mechanism. Where post.work is a processor, the data processing agreement governs new subprocessors and change notices.

Related information

See the Terms of use, Privacy notice, and Cookies.