Current subprocessors
| Vendor | Purpose | Region | Safeguards |
|---|---|---|---|
| Lovable Cloud (managed Postgres, Auth, Storage) | Primary database, authentication and object storage for customer workspaces | Latin America (managed cloud region) | TLS in transit; AES-256 at rest; row-level security enforcing workspace isolation; DPA in place with vendor. |
| Lovable AI Gateway | Routing of AI model requests initiated by users of the copilot and automation features | Multi-region routing | TLS in transit; no long-term storage of prompt content by the gateway; requests scoped to the authenticated workspace. |
Transactional email (authentication, notifications, invitations) is delivered through the platform’s built-in email service; no separate third-party email vendor is engaged at this time. We do not use analytics, advertising or error-tracking third parties.
Change notifications
Enterprise customers may subscribe to subprocessor change notifications by emailing oracle@inifye.tech. Construction OS will give at least 30 days’ notice before adding or replacing a subprocessor for Customer Personal Data.
Objection process
A customer may object in writing on reasonable data protection grounds. The parties will work in good faith to resolve the objection; if unresolved within 30 days, the customer may terminate the affected portion of the Service without penalty.
