Sub-processors

Every service that may touch personal data, with purpose and region.

Last updated: 19 September 2026

Current list

Each provider below works under a data processing agreement carrying confidentiality, security standards, sub-processor notice, breach-notice timelines, deletion on termination, and an explicit no-training-on-customer-content clause.

Lovable Cloud (backend, database, authentication, storage) — Accounts, conversation history, patterns, and voice-timing records. Data: Email address, preferred name, transcripts, pattern rows, technical logs. Region: United States / European Union.
Lovable AI Gateway — Generating companion replies, embeddings, speech-to-text and text-to-speech. Data: Message text sent for a reply, short audio for transcription. Region: United States.
Transactional email provider — Verification, password, and account-notice emails. Data: Email address and message content. Region: United States / European Union.
Hosting and content delivery — Serving the application. Data: IP address, request metadata. Region: Global edge network.

Changes

This list is updated before a new sub-processor begins processing. The date at the foot of this page marks the last change.

Back to dashboard