Legal
Service providers and subprocessors
Last updated: September 2026
Ilovite uses the providers below to operate, store, authenticate, and deliver the service. Not every provider acts as a GDPR subprocessor in every context — for example, Google OAuth is a sign-in provider, while Supabase and Resend process personal data on our behalf.
Beta production infrastructure uses Supabase for database and file storage in the EU (Stockholm), and Vercel Pro for application hosting. Some of our service providers may process personal data outside the European Economic Area. Where required, appropriate safeguards are used to protect personal data in accordance with applicable data protection law.
Vercel
- Purpose
- Application hosting and deployment
- Processing location
- United States and other locations
- Transfer safeguards
- EU Standard Contractual Clauses (SCCs) where applicable
Supabase
- Purpose
- PostgreSQL database and invitation media storage
- Processing location
- EU — Stockholm (eu-north-1)
- Transfer safeguards
- Project data hosted in EU; safeguards for other international processing where required
Resend
- Purpose
- Transactional email delivery
- Processing location
- United States
- Transfer safeguards
- EU SCCs where applicable
Google OAuth
- Purpose
- Optional account authentication
- Processing location
- Global
- Transfer safeguards
- Google's applicable data transfer safeguards
This list describes the current beta stack. We will provide reasonable advance notice of new or replacement subprocessors, as described in the Data Processing Terms. For more on personal data processing, see our Privacy Policy.