InstAssist

Sub-Processors List - 1ma.ai

Last Updated: March 5, 2026

In accordance with our Data Processing Agreement and Privacy Policy, below is the current list of sub-processors engaged by ООО «1ма» (1ma.ai) to process personal data on behalf of our clients.

We will notify clients of any changes to this list at least 30 days in advance via email or in-app notification, in accordance with Section 5 of our Data Processing Agreement.

1. Current Sub-Processors

Category	Sub-Processor	Purpose	Data Processed	Data Location
AI Processing	OpenAI, Inc.	Generation of automated message responses, text recognition (OCR) on media content, vector embeddings for product search, AI-assisted data mapping	Message content, media content, product data	United States
Cloud Database & Storage	Supabase, Inc.	Primary database, file storage, real-time data synchronization	All service data (accounts, conversations, messages, products, media)	United States (AWS)
Authentication	Clerk, Inc.	User authentication, account management, invitation system	User email, name, authentication tokens	United States
Hosting & Serverless	Vercel, Inc.	Application hosting, serverless function execution, cron job scheduling	Application data in transit, request logs	United States (AWS)
Message Queue	Upstash, Inc.	Asynchronous job processing, message debouncing	Message metadata, job payloads	United States

2. Categories of Processing

AI Processing: Message content and media from Instagram conversations is sent to AI processing providers to generate automated responses and perform text recognition. Product catalog data is processed to create search indexes.
Cloud Database & Storage: All service data is stored in cloud database infrastructure, including user accounts, conversations, messages, product catalogs, and media files.
Authentication: User identity verification and session management is handled by a dedicated authentication provider.
Hosting & Serverless: The application and its API endpoints are hosted on cloud infrastructure providers.
Message Queue: Asynchronous processing tasks (such as debounced AI response generation and media processing) are managed through a message queue service.

3. Security Measures

All sub-processors are bound by data processing agreements that require:

Appropriate technical and organizational security measures
Processing of data only as instructed by 1ma.ai
Confidentiality obligations for personnel with access to data
Notification of data breaches
Data deletion upon termination

4. Changes to This List

When we add or replace a sub-processor:

We update this page with the new information
We notify all active clients at least 30 days before the change takes effect
Clients may object to changes in accordance with the Data Processing Agreement (Section 5)

5. Contact

If you have questions about our sub-processors, contact us at:

📧 hello@1ma.ai

Sub-processors