Sub-processors
These are the third-party services Moose relies on to operate, what each one does, and where it processes data.
Last updated: May 31, 2026
Moose uses the third-party services below to operate. Each processes data only as needed to provide its part of the service, under its own terms and data-protection commitments. We update this list when our sub-processors change.
Current sub-processors
| Sub-processor | Purpose | Region |
|---|---|---|
| Supabase | Database, authentication, and file storage | United States / EU |
| Hostinger | Application hosting (VPS) for the Moose app and background workers | EU |
| Google (Analytics Data & Admin APIs) | Reads your connected Google Analytics 4 property (aggregated traffic — no customer PII) for the "what your posts did" reporting | United States |
| Google (Gemini) | AI generation (captions, images, replies) and profile analysis | United States |
| Meta (Instagram Graph API) | Posting, comment/DM automation, and account insights for your connected Instagram account | United States |
| Resend | Transactional and notification email delivery | United States |
Google Analytics data
When you connect Google Analytics, Moose reads only aggregated traffic metrics (sessions, key events, and channel breakdowns) for your chosen property. We do not read or store individual visitor or customer records. Our use of Google Analytics data follows the Google API Services User Data Policy, including the Limited Use requirements: we do not sell this data, do not use it for advertising, do not use it to train AI models, and delete it when you disconnect or revoke access.
Changes
We will update this page when we add or remove a sub-processor. If you have a Data Processing Addendum with us, we will provide notice of material changes as described in that addendum.