Legal
Subprocessors
Last updated: November 2025
Vault47 uses the third-party service providers ("subprocessors") listed below to operate the Service. Each subprocessor is bound by data-protection commitments consistent with our Privacy Policy and DPA.
Core infrastructure
Used for every Vault47 account.
| Provider | Purpose | Data processed | Region |
|---|---|---|---|
| Supabase (Cloud infrastructure) | Database, authentication, storage, edge functions | Account data, business data you enter, uploaded files | United States |
| Cloudflare | Application hosting, CDN, DDoS protection | IP address, request metadata | Global (US-primary) |
| Lovable | Application platform, build & deploy pipeline, email delivery | Account data, transactional email content | United States / EU |
AI providers
Powers photo scan, price estimation, chat, and marketing generation. See our Terms for how AI content may be used to train and improve models.
| Provider | Purpose | Data processed | Region |
|---|---|---|---|
| Google Gemini (via Lovable AI Gateway) | AI extraction, chat assistant, marketing text generation, image analysis | Prompts, uploaded photos, item descriptions | United States |
| Higgsfield | Marketing image and video generation | Prompts, reference images, brand descriptors | United States |
Messaging & notifications
| Provider | Purpose | Data processed | Region |
|---|---|---|---|
| GatewayAPI | SMS delivery for CRM texting campaigns | Recipient phone numbers, message content | European Union |
| Web Push (VAPID) | Browser & iOS lock-screen push notifications | Push subscription endpoint, notification content | Global (browser vendor) |
Optional integrations
Only used if you explicitly connect the corresponding account inside Vault47.
| Provider | Purpose | Data processed | Region |
|---|---|---|---|
| Google (Gmail) | Only if you connect a Gmail account, read & send messages inside Vault47 | Messages, message metadata, contact info | United States |
| Meta (WhatsApp, Instagram, Messenger) | Only if you connect a Meta business account, read & send messages inside Vault47 | Messages, message metadata, contact info | United States |
| Telegram | Only if you connect a Telegram bot, read & send messages inside Vault47 | Messages, message metadata | Global |
Updates to this list
We may add or replace subprocessors as the Service evolves. Material changes will be announced in-app or by email at least 15 days before they take effect, unless a change is required to address an urgent security or legal issue.
Contact
Questions about subprocessors? Email privacy@vault47.cloud.