Sub-processors
Last updated: June 30, 2026
This page lists every third-party sub-processor Declogger relies on to deliver the Service. It supplements our Privacy Policy and our Data Processing Agreement (DPA). We give customers at least 30 days' notice before adding or replacing a material sub-processor, via in-app announcement and email to billing contacts.
| Sub-processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Lovable Cloud (managed Supabase) | Application database, authentication, file storage, server functions. | EU (Frankfurt) | No third-country transfer. |
| Lovable AI Gateway → Google (Gemini 3 Flash Preview) | Large-language-model inference for conflict & opportunity detection, the Ask bar, and summarization. | EU region routing where available; otherwise EEA-compatible Google Cloud regions. | EU Standard Contractual Clauses (SCCs) + EU-US Data Privacy Framework where applicable. No customer data is used to train models. |
| Paddle.com Market Ltd. | Merchant of record for subscription billing, invoicing, and VAT compliance. | UK & EU | UK adequacy decision + SCCs. |
| Twilio Ireland Ltd. | WhatsApp and SMS inbound channels for capturing decisions. | EU (Ireland) | SCCs for any onward US transfer. |
| Resend (email delivery) | Transactional and notification email delivery. | EU/US | SCCs + EU-US Data Privacy Framework. |
Data Processing Agreement
A standard DPA covering the GDPR Article 28 requirements is available for every paying customer. Open the Declogger DPA and either save it as a PDF (browser → Print → Save as PDF) or email compliance@declogger.com for a counter-signed copy.
Hosting & infrastructure
All application data is hosted in the EU. Backups are kept in the same region. AI inference requests may be routed to other Google Cloud regions for capacity reasons, always under SCCs; the request and response payloads are not retained by the provider and are not used to train models.
See also: AI transparency · Acceptable use · Privacy policy