Sub-processors
Last updated: June 11, 2026
This page lists the sub-processors RecovraFlow uses to deliver the Service. We will update this list and notify customers of material additions or replacements at least 30 days in advance, in line with our Data Processing Addendum. Your continued use of the Service after the notice period constitutes acceptance of the change.
| Sub-processor | Purpose | Data | Location |
|---|---|---|---|
| Lovable Cloud (Supabase) | Database, authentication, storage, scheduled jobs | Account data, dispute data, integration credentials, evidence files | EU / US |
| Cloudflare, Inc. | Application hosting (Workers), CDN, DDoS protection | Request metadata, IP address, all data in transit | Global edge network |
| Stripe, Inc. | Subscription billing and payment processing; chargeback ingestion and submission for connected merchant accounts | Billing identifiers, plan, invoice metadata; merchant-authorized Stripe data | US, Ireland |
| PayPal Holdings, Inc. | Dispute ingestion and submission for connected merchant PayPal accounts | Merchant-authorized PayPal dispute data | US, Luxembourg |
| Google LLC (Gemini via Lovable AI Gateway) | AI-assisted drafting of dispute rebuttal text | Dispute context, order details, and evidence summaries you submit for drafting | US |
| Resend (or transactional email provider) | Transactional and account email delivery | Recipient email, message metadata and content | US / EU |
Notice and objection
To receive sub-processor change notifications by email, ensure a primary contact is set in your account. To object to a new sub-processor on legitimate data-protection grounds, email privacy@recovraflow.com within the notice period.