Subprocessors
Last updated: 22 August 2026
EGNITE uses the third parties below to operate the platform. Your customer database — accounts, brands, prompts, scan history — is stored in the European Union (Ireland). AI providers receive only the prompt text and the public brand context you enter; they never receive your email address, account identifier, or any other personal data.
| Subprocessor | Purpose | Data received | Region | Transfer basis |
|---|---|---|---|---|
| Lovable Cloud (Supabase infrastructure, AWS) | Hosting, database, authentication, server functions | All account and workspace data | EU — Ireland (eu-west-1) | Processing stays in the EEA |
| Cloudflare | Edge delivery, TLS termination, bot protection | IP address and request metadata | Global edge, EU points of presence | Standard Contractual Clauses |
| Resend (via Lovable Email) | Transactional and newsletter email delivery | Name and email address | United States | Standard Contractual Clauses |
| Paddle | Subscription billing, invoicing and tax (merchant of record) | Billing contact and plan metadata — no card data reaches EGNITE | United Kingdom / EU | UK adequacy decision / EEA processing |
| OpenAI (ChatGPT, Copilot models) | AI visibility scanning | Prompt and public brand context only | United States | Standard Contractual Clauses; no personal data transmitted |
| Anthropic (Claude) | AI visibility scanning and content rewrites | Prompt and public brand context only | United States | Standard Contractual Clauses; no personal data transmitted |
| Google (Gemini) | AI visibility scanning and report narratives | Prompt and public brand context only | United States | EU-US Data Privacy Framework / SCCs; no personal data transmitted |
| Perplexity | AI visibility scanning and citation retrieval | Prompt and public brand context only | United States | Standard Contractual Clauses; no personal data transmitted |
| xAI (Grok) | AI visibility scanning | Prompt and public brand context only | United States | Standard Contractual Clauses; no personal data transmitted |
| DeepSeek | AI visibility scanning | Prompt and public brand context only | Outside the EEA | Standard Contractual Clauses; no personal data transmitted |
| Firecrawl | Public web page retrieval for GEO scans | Public URLs you submit | United States | Standard Contractual Clauses; no personal data transmitted |
Changes to this list
Before we add or replace a subprocessor that processes personal data, we update this page and notify customers with an active subscription by email. You may object on reasonable data-protection grounds; if we cannot offer an alternative, you may terminate the affected service without penalty.
Questions
Email privacy@egnitegroup.com for a countersigned Data Processing Agreement or a completed security questionnaire.
See also: Privacy Policy, Trust & Security, Cookie Policy.