Current subprocessors
| Provider | Purpose | Region | Data category |
|---|---|---|---|
| Supabase (via Lovable Cloud) | Managed Postgres database, authentication, file storage | United States | All Customer Data at rest |
| Cloudflare | Edge hosting (Workers), CDN, DDoS protection, WAF | Global (US edge primary) | Customer Data in transit, application code |
| Google (Gemini API) | AI inference for chat, document analysis, generation | United States | Prompts and documents you submit to AI features. Zero-retention, no-training per enterprise terms. |
| OpenAI | AI inference for select reasoning tasks | United States | Prompts you submit to AI features. Zero-retention API, no training per OpenAI API data policy. |
| Perplexity | Live legal/web search (Case Law) | United States | Search queries. No customer documents transmitted. |
| Stripe | Payment processing, subscription billing | United States | Billing contact, payment method (tokenized), invoice history |
| Resend | Transactional email delivery (auth, notifications, share links) | United States | Recipient email, message subject and body |
| Lovable | Platform hosting, build, deployment, observability | United States / EU | Operational logs and metrics; no customer document content |
Change notice
We will give at least 30 days' notice (in-product or by email to your billing contact) before adding or replacing a subprocessor that processes Customer Data.
How to object
Customers on paid plans may object to a new subprocessor on reasonable data-protection grounds within 30 days of notice by emailing privacy@theintelligentagent.ai. If we cannot accommodate the objection, you may terminate the affected service for a prorated refund of unused fees.