BMODBRIDGE SOLUTIONS LLC

THIRD-PARTY SERVICE PROVIDERS (SUBPROCESSORS)

We use the following third-party service providers to operate our service. Each provider processes personal data only as needed to perform its services for us.

• Lovable: Application hosting, database, user authentication, file storage, and sending of email and push notifications. Location: EU (Sweden).
• Supabase: Database, user authentication, and file storage (the backend that powers Lovable Cloud). Location: US.
• Google: Sign in with Google, Firebase Cloud Messaging for push notifications, and Google Fonts. Location: US.
• Apple: Sign in with Apple. Location: US.
• Paddle: Payment processing and billing (merchant of record). Location: UK.
• PostHog: Product analytics, only for people who accept analytics cookies. Location: US.
• Sentry: Error monitoring and performance tracking. Location: US.
• Twilio: SMS text messages, such as sign-in codes and phone verification. Location: US.

Optional AI Features

• OpenAI (via Lovable): Processing of content submitted to AI-powered features. Location: US.

AI-powered features are disabled by default. They are only active if a company administrator chooses to enable them for their organization. When disabled, no data is sent to OpenAI.

We may update this list from time to time. A complete, current list of subprocessors is available upon request at privacy@bmodbridge.com.