Legal
Sub-processors
Providers that may process personal data when Ecomduct is used. Customers are informed at least 30 days before a provider is added or replaced.
Last updated: 2026-09-28
01
Lovable Labs Incorporated AB
- Purpose
- Development and hosting platform for the web app
- Data
- All data in the service (technical operation)
- Location
- Sweden/EU
- Transfer safeguard
- Data processing agreement
- When
- Always
02
Supabase Inc. (via Lovable Cloud)
- Purpose
- Database, authentication and file storage
- Data
- Accounts, connected-platform data, content, encrypted tokens
- Location
- Stored in AWS eu-west-1 (Ireland). Company based in the USA.
- Transfer safeguard
- Standard Contractual Clauses (SCCs) for any access from the USA
- When
- Always
03
Lovable AI Gateway → Google (Gemini) and OpenAI
- Purpose
- AI analyses, content suggestions and images
- Data
- Copy, statistics and images included in an AI request
- Location
- USA
- Transfer safeguard
- EU–US Data Privacy Framework and/or SCCs. Data is not used to train models.
- When
- When an AI feature is used
04
Higgsfield
- Purpose
- Generate video from images and text
- Data
- Selected image and prompt
- Location
- USA
- Transfer safeguard
- SCCs
- When
- Only when you choose to generate a video
05
Meta Platforms Ireland Ltd.
- Purpose
- Read statistics and publish to your Facebook and Instagram accounts
- Data
- Your approved content, account and ad statistics
- Location
- Ireland/USA
- Transfer safeguard
- Meta's terms, DPF/SCCs
- When
- When you connect Meta
06
TikTok Technology Ltd.
- Purpose
- Read statistics and publish your videos
- Data
- Your approved videos and account statistics
- Location
- Ireland and other countries under TikTok's terms
- Transfer safeguard
- TikTok's terms, SCCs
- When
- When you connect TikTok
07
Google Ireland Ltd. (Google Ads)
- Purpose
- Read campaign, keyword and product statistics
- Data
- Ad account statistics – no data about your shoppers
- Location
- Ireland/USA
- Transfer safeguard
- Google's terms, DPF/SCCs
- When
- When you connect Google Ads
08
Shopify International Ltd.
- Purpose
- Read sales, products and inventory; publish blog posts you approve
- Data
- Aggregated sales, products, inventory and cost – shoppers' personal data is not stored
- Location
- Ireland/Canada
- Transfer safeguard
- Adequacy decision (Canada), Shopify's terms
- When
- When you connect your store