YELLOW FLAG · DRAFT — this text is under legal review before the commercial launch.This is a translation provided for convenience. If there is any difference, the Portuguese version prevails.
Pit crew
Subprocessors
Last updated: 31 October 2026
01Who processes data for us
To provide the service, Paddock relies on providers that process personal data on our behalf and under our instructions. All are bound by contract to confidentiality and security obligations. We do not sell personal data or use it for advertising.
02Current list
| Provider | Purpose | Data | Where |
|---|---|---|---|
| Lovable Labs Inc. (USA) | Application platform: hosting, database, authentication and AI gateway | Account, content, technical logs | Database in London, United Kingdom; transfers to the USA under standard contractual clauses |
| Supabase Inc. (USA), via Lovable | Managed database and authentication | Account, content | London, United Kingdom (Amazon Web Services) |
| Cloudflare Inc. (USA), via Lovable | Website delivery and network protection | IP address, technical requests | Global network; EU-U.S. Data Privacy Framework and standard contractual clauses |
| Google (Gemini model), via Lovable's AI gateway | Wall (Muro) answers, only when you use it | Question text and necessary context | EU or USA; no model training on your data |
| Brevo (Sendinblue SAS, France) | Service, sign-in and waitlist emails | Email, name, email content | European Union |
03Independent controllers
These providers process data as independent controllers, under their own privacy policies:
- Paddle.com Market Ltd (United Kingdom): reseller and Merchant of Record. Handles payments, invoicing and taxes. Paddock never sees card data.
04Changes
Before adding or replacing a subprocessor, we update this page. Customers with a data processing agreement are notified in advance and may object.
Questions or requests about these providers: hello@mypaddock.app. More detail in the Privacy policy.